comp-sushi[.]xyz

The domain comp-sushi.xyz is a high-risk phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It presents itself as a legitimate SushiSwap interface, using the page title 'Stake SUSHI | Sushi' to deceive users into interacting with fraudulent cryptocurrency transactions. No drainer kit was identified, but the site was actively used for cryptocurrency scams before being taken offline.

Technical indicators confirm the malicious nature of comp-sushi.xyz. The domain was flagged by 10 of 95 VirusTotal security vendors, including ChainPatrol, alphaMountain.ai, and BitDefender. It appears on four security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. The domain was created on 2026-02-21 and resolves to the IP address 107.173.34.115, hosted by AS36352 HostPapa in the US. The SSL certificate is issued by R11, and Gridinsoft assigned it a trust score of 0/100. Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with comp-sushi.xyz should immediately revoke any token approvals granted to unknown or suspicious contracts using tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet to prevent unauthorized access. Report the domain to relevant platforms, including the impersonated brand SushiSwap, and consider submitting it to additional blocklists or threat-intelligence feeds. Enable two-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions.