sushi-vps[.]top

The domain sushi-vps.top is a phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It presents itself as a legitimate SushiSwap interface, using the page title 'Stake SUSHI | Sushi' to deceive users into interacting with fraudulent staking or transaction prompts. This scam is classified as a cryptocurrency phishing operation, though no drainer kit was identified. As of the latest verification, sushi-vps.top has been taken offline.

Technical indicators confirm the malicious nature of sushi-vps.top. The domain was flagged by 9 of 95 security vendors on VirusTotal, including alphaMountain.ai, BitDefender, and CyRadar. It appears on one security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0/100. The domain was created on February 21, 2026, and resolves to the IP address 107.172.83.150, located in the US under AS36352 (HostPapa). The SSL certificate is issued by R11. Notably, Google Safe Browsing has not flagged the domain, and registrar information is not available.

Users who interacted with sushi-vps.top should take immediate action to secure their assets. Revoke any token approvals granted to unknown or suspicious contracts using a tool like Etherscan's token approval checker. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. If credentials were entered, change passwords immediately and enable two-factor authentication (2FA) on all related accounts. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.