sushi-bulla[.]top

The domain sushi-bulla.top is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a decentralized cryptocurrency exchange. It presented itself as a legitimate staking platform for SUSHI tokens but was designed to deceive users into disclosing sensitive information or transferring funds under false pretenses. No drainer kit was identified, but the site operated as a cryptocurrency scam. As of the latest verification, sushi-bulla.top has been taken offline.

Technical indicators confirm the malicious nature of sushi-bulla.top. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Trustwave and Webroot, while appearing on 4 security blocklists such as PhishDestroy, Polkadot, and Enkrypt. It was registered on February 21, 2026, and resolved to the IP address 107.172.83.150, hosted by AS36352 (HostPapa) in the US. The SSL certificate was issued by R11, and the observed page title was 'Stake SUSHI | Sushi'. Gridinsoft assigned a trust score of 0/100, while Scamadviser rated it 6/100, further supporting its classification as a phishing domain.

Users who interacted with sushi-bulla.top should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the domain to relevant platforms, including the impersonated brand (SushiSwap), blockchain security teams, and threat-intelligence services like PhishTank or URLVoid to aid in takedown efforts.