sushi-nvb[.]xyz

sushi-nvb.xyz is a phishing domain that impersonates the cryptocurrency brand SushiSwap, posing a specific threat of brand impersonation to trick users into revealing sensitive information or making fraudulent transactions. The domain is currently taken offline, but it was active and designed to deceive victims seeking legitimate SushiSwap services. No drainer kit was identified, but the site's purpose was to facilitate cryptocurrency-related scams.

Technical indicators show that sushi-nvb.xyz was flagged by 2 of 95 VirusTotal vendors, including alphaMountain.ai and Forcepoint ThreatSeeker, and appears on 1 security blocklist (PhishDestroy). Google Safe Browsing did not flag the domain. The domain was created on February 21, 2026, and resolves to IP address 107.172.83.150, located in the US with AS36352 HostPapa. The SSL certificate was issued by R11, and the observed page title was '恭喜，站点创建成功！' (Chinese for 'Congratulations, site created successfully!'). The Gridinsoft trust score is 0 out of 100, indicating high risk.

Users who interacted with sushi-nvb.xyz should take immediate safety steps. Since this is a cryptocurrency brand impersonation, if any credentials or wallet information were entered, change passwords for affected accounts and enable two-factor authentication. For cryptocurrency wallets, revoke any token approvals granted to suspicious addresses and move funds to a new, secure wallet. Report the domain to relevant authorities such as PhishDestroy or the SushiSwap team to help prevent future attacks.