sushi-cake[.]xyz

Analysis of the domain sushi-cake.xyz confirms its classification as a crypto scam impersonating the decentralized exchange SushiSwap. The domain was registered on February 21, 2026, and resolved to the IP address 107.172.83.150, hosted on AS36352 (HostPapa) in the United States. At the time of assessment, the domain displayed a generic Chinese-language page title, '恭喜，站点创建成功！', indicating a placeholder or recently deployed site, though no further content analysis was conducted to confirm its exact functionality. Infrastructure review reveals the domain was assigned an SSL certificate labeled R10, a low-trust indicator often associated with automated or low-cost hosting environments.

Detection data from July 24, 2026, shows the domain was flagged by 3 of 93 security vendors on VirusTotal and appeared on one security blocklist. The domain was also blocked by PhishDestroy, reinforcing its malicious classification. Gridinsoft assigned a trust score of 0/100, further supporting its high-risk status. While the domain is currently offline, defenders should treat any future resolution or reactivation as a potential threat.

The combination of brand impersonation, cryptocurrency targeting, and low-trust hosting infrastructure aligns with known scam patterns. Organizations are advised to block the domain and its associated IP (107.172.83.150) at the perimeter, monitor for related domains using similar naming conventions (e.g., 'sushi-[word].xyz'), and alert users to the risk of SushiSwap impersonation schemes. No additional payload or malware samples linked to this domain have been confirmed at this time.