sushi-paal[.]cc

The domain sushi-paal.cc is a phishing site engaged in brand impersonation targeting SushiSwap, a decentralized cryptocurrency exchange. It presents itself as a legitimate SushiSwap staking portal under the page title 'Stake SUSHI | Sushi' but is designed to deceive users into disclosing sensitive information or transferring cryptocurrency to attacker-controlled wallets. No drainer kit was identified in this campaign. The site is currently taken offline, though prior activity classified it as an elevated-risk scam.

Technical indicators confirm sushi-paal.cc as malicious. As of analysis, 2 of 95 VirusTotal security vendors flagged the domain, including alphaMountain.ai and Forcepoint ThreatSeeker. The domain appears on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. It was registered on February 21, 2026, and resolves to the IP address 107.172.83.150, hosted on AS36352 (HostPapa) in the US. The SSL certificate is issued by R11. Gridinsoft assigned a trust score of 0/100, reinforcing its classification as a phishing threat.

Users who interacted with sushi-paal.cc should immediately revoke any token approvals granted to unknown contracts using tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Change passwords for any accounts accessed via the phishing site and enable two-factor authentication. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in takedown efforts.