weeth-sushi[.]xyz

The domain weeth-sushi.xyz is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It operated as a cryptocurrency scam designed to deceive users into believing they were interacting with the legitimate SushiSwap service. No drainer kit was identified, but the site posed an elevated risk of credential theft or fraudulent transactions. As of the latest verification, weeth-sushi.xyz has been taken offline.

Technical analysis of weeth-sushi.xyz reveals limited but notable detection. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and Trustwave, while Google Safe Browsing did not flag it. It appeared on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. The domain was created on February 21, 2026, and resolved to the IP address 172.67.153.167, hosted on Cloudflare's infrastructure in the US (AS13335). The SSL certificate was issued by WE1, and the observed page title was 'Nur einen Moment…'. No registrar information was available.

Users who interacted with weeth-sushi.xyz should take immediate action to secure their assets and accounts. For cryptocurrency-related exposure, revoke any token approvals granted to the domain, transfer funds to a new wallet, and monitor transaction history for unauthorized activity. If credentials were entered, change passwords on the legitimate SushiSwap platform and enable two-factor authentication. Report the phishing domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or the impersonated brand’s security team, to aid in mitigation efforts.