lion-sushi[.]xyz

lion-sushi.xyz was registered through NameSilo, LLC on 22 June 2025 and is currently listed as offline. The site’s sole nameserver and the page title both read “lion-sushi.xyz”, providing no additional context beyond the domain itself. The domain is classified as a crypto‑scam that impersonates the SushiSwap platform, a claim corroborated by the supplied “Impersonates: SushiSwap” field. VirusTotal analysis recorded eight detections out of ninety‑five scanners, indicating that multiple security engines identified malicious behavior.

The domain appears on five independent blocklists—PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura—further confirming its malicious reputation. Gridinsoft assigns a trust score of zero out of one hundred, reflecting an extreme lack of confidence in the domain’s legitimacy. No SSL certificate details, hosting IP addresses, or Safe Browsing verdicts are available in the current dataset, leaving the underlying infrastructure uncharacterized. Defenders should treat any network traffic to or from lion‑sushi.xyz as hostile.

Immediate mitigation steps include adding the domain to local deny lists, updating DNS filtering policies to block the listed registrars’ name servers, and ensuring that endpoint protection solutions incorporate the eight VirusTotal detections. Continuous monitoring of the five blocklists for potential re‑activation is advised, as the domain may be resurrected by the threat actor. Because the site is offline, active takedown verification is not possible, but threat intelligence feeds should retain the indicator for future correlation with phishing or crypto‑drain campaigns targeting SushiSwap users.