sushi-ath[.]top

The domain sushi-ath.top is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It presented itself as a legitimate staking portal for SUSHI tokens but was designed to deceive users into disclosing sensitive information or transferring funds under false pretenses. No drainer kit was identified in this campaign. The site is currently taken offline, though its prior activity poses residual risk to users who may have interacted with it.

Technical indicators confirm the malicious nature of sushi-ath.top. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Trustwave and Webroot, and appeared on 1 security blocklist (PhishDestroy). It was registered through NameSilo, LLC on July 05, 2025, and resolved to the IP address 107.172.83.150, hosted by AS36352 (HostPapa) in the US. The SSL certificate was issued by R10, and the observed page title was 'Stake SUSHI | Sushi'. Gridinsoft assigned a trust score of 0 out of 100, further corroborating its fraudulent intent.

Users who visited sushi-ath.top should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the domain to relevant platforms, including the impersonated brand (SushiSwap), the registrar (NameSilo), and threat-intelligence feeds such as PhishTank or URLVoid to aid in broader mitigation efforts.