sushi-unibot[.]xyz

The domain sushi-unibot.xyz is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a decentralized cryptocurrency exchange. It presents itself as a legitimate SushiSwap platform to deceive users into interacting with fraudulent staking or token-swap interfaces, posing an elevated risk of financial loss through cryptocurrency scams. As of the latest verification, sushi-unibot.xyz has been taken offline, though users who previously visited the site may still be at risk.

Technical analysis reveals that sushi-unibot.xyz was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and Trustwave, with a Gridinsoft trust score of 0/100. The domain appears on 1 security blocklist, specifically PhishDestroy. It was created on February 21, 2026, and resolved to the IP address 107.172.83.150, hosted by AS36352 HostPapa in the US. The SSL certificate was issued by R10, and the observed page title was 'Stake SUSHI | Sushi'. Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with sushi-unibot.xyz should immediately revoke any token approvals granted to unknown contracts using tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. If credentials were entered, change passwords on all associated accounts and enable two-factor authentication (2FA). Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.