sushi-zkj[.]xyz

The domain sushi-zkj.xyz is a phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It poses an elevated risk as a cryptocurrency scam, designed to deceive users into disclosing sensitive information or transferring funds under false pretenses. As of the latest verification, sushi-zkj.xyz has been taken offline, though it previously operated without an associated drainer kit.

Technical analysis of sushi-zkj.xyz reveals limited detection by security vendors, with 2 of 95 VirusTotal vendors flagging the domain, including Forcepoint ThreatSeeker and Trustwave. The domain appears on 1 security blocklist, specifically PhishDestroy. It was created on February 21, 2026, though details such as the registrar, IP address, and SSL issuer are not available. No page title was observed during active monitoring, and Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with sushi-zkj.xyz should take immediate steps to secure their assets and accounts. For cryptocurrency-related phishing, revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. If credentials were entered, change passwords on the legitimate SushiSwap platform and enable two-factor authentication. Report the phishing domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or the impersonated brand’s security team, to aid in mitigation efforts.