zyncoin[.]sushi[.]onl

Analysis of the domain zyncoin.sushi.onl indicates a targeted crypto‑related impersonation campaign against SushiSwap. The domain was registered on February 21, 2026 and, as of the report date, has been taken offline. VirusTotal recorded two detections out of ninety‑three security vendors, confirming that at least a subset of scanning engines consider the site malicious.

The domain is listed on a single public blocklist, PhishDestroy, which further validates its classification as a phishing or scam resource. The threat is identified as a crypto scam that leverages the SushiSwap brand, aligning with the supplied brand target and scam type. No additional infrastructure details such as hosting IP address, autonomous system number, or SSL certificate information have been disclosed in the available intelligence.

The elevated risk rating reflects the combination of brand impersonation and the financial nature of the deception. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration attempts, and ensure that endpoint protection solutions are updated to reflect the two vendor detections reported by VirusTotal. Threat intelligence feeds should be refreshed to capture any future activity associated with the domain or related indicators of compromise.