sushi-ldo[.]xyz

The domain sushi-ldo.xyz has been identified as a brand impersonation threat, specifically targeting SushiSwap. Currently, the domain is offline, reducing immediate risk but warranting continued monitoring due to its previous malicious intent. The page title found, 'Stake SUSHI | Sushi', further indicates its attempt to deceive users into believing it is affiliated with SushiSwap.

Technical analysis reveals that sushi-ldo.xyz was flagged by 8 out of 95 security vendors on VirusTotal, indicating a significant consensus regarding its threat level. The domain was registered through NameSilo, LLC, and resolved to the IP address 107.172.83.150, located in the United States under AS36352 HostPapa. It was created on July 12, 2025, and has appeared on one security blocklist. The domain's SSL certificate, identified as R10, does not provide sufficient assurance of its legitimacy.

Given its current offline status, sushi-ldo.xyz poses no immediate threat. However, entities should remain vigilant as the domain could become active again. It is recommended to enhance security measures by implementing robust web filtering to block access to flagged domains and to keep systems updated with the latest threat intelligence feeds. Organizations should also educate users on recognizing brand impersonation attempts to mitigate potential risks from similar domains.