eth-sushi[.]xyz

The domain eth-sushi.xyz was registered on June 26, 2025 through NameSilo, LLC and currently resolves with a single nameserver. HTTP requests return a 200 status and the page title is exactly "eth-sushi.xyz". The site is identified as a brand‑impersonation campaign targeting SushiSwap, with the listed scam type being cryptocurrency. The threat is classified as high risk and remains active as of the report date, July 12, 2026.

Reputation scoring indicates a Gridinsoft trust score of 0 out of 100, and the domain appears on four independent security blocklists. It is actively blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. VirusTotal analysis shows that 11 of 95 security vendors have flagged the domain, reinforcing the malicious assessment. No additional infrastructure details such as IP address, ASN, or hosting provider have been disclosed in the available intelligence, leaving the broader command‑and‑control architecture uncertain.

Defenders should prioritize immediate containment of eth-sushi.xyz across perimeter defenses. Adding the domain to DNS‑based blacklists, web‑proxy filters, and endpoint protection allow‑lists will prevent accidental user navigation. Continuous monitoring for any resolution changes or new associated subdomains is advised, as threat actors often expand their infrastructure after initial deployment. Users of SushiSwap services should be warned about unsolicited links referencing this domain and instructed to verify URLs against official SushiSwap resources.