fsp-sushi[.]xyz

Analysis of fsp-sushi.xyz confirms it as a crypto scam domain targeting SushiSwap users, currently offline as of July 24, 2026. The domain was registered on August 17, 2025, through Namecheap and resolves to Cloudflare IP 2606:4700:3030::6815:2001 (AS13335, US). Security vendors have flagged this domain: 3 of 93 on VirusTotal, and it appears on four blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura.

The SSL certificate is issued by WE1, a common provider for low-reputation domains. The page title 'Et øjeblik ...' suggests a temporary holding or redirect page, though the exact content remains unanalyzed. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification.

Defenders should treat this domain as confirmed malicious infrastructure, block it at the network and endpoint levels, and monitor for related domains using similar naming patterns or Cloudflare-hosted IPs. No evidence of active exploitation was observed, but its registration age and blocklist presence indicate prior malicious use. Further investigation into associated wallets or transaction patterns is recommended for incident response teams.