sushi-woo[.]xyz

The domain sushi-woo.xyz is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It presents itself as a legitimate SushiSwap interface, using the page title 'Stake SUSHI | Sushi' to deceive users into interacting with fraudulent staking or transaction prompts. This site does not deploy a known drainer kit but operates as a cryptocurrency scam designed to steal credentials or funds. As of the latest verification, sushi-woo.xyz has been taken offline.

Technical analysis reveals that sushi-woo.xyz was flagged by 1 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned a trust score of 0/100. The domain appears on two security blocklists, PhishDestroy and ScamSniffer, though it was not flagged by Google Safe Browsing. Registered on February 21, 2026, the domain resolved to the IP address 107.172.83.150, hosted by AS36352 (HostPapa) in the United States. The SSL certificate was issued by R10, a common provider for low-reputation domains.

Users who interacted with sushi-woo.xyz should immediately revoke any token approvals granted to unknown contracts using tools like Etherscan or Revoke.cash. Funds should be transferred to a new wallet to prevent unauthorized access. Change passwords for any accounts linked to the phishing site and enable two-factor authentication (2FA) where available. Report the domain to platforms such as ScamAdviser, PhishTank, or the impersonated brand’s official security channels to aid in takedown efforts.