sushl[.]co

PhishDestroy has identified sushl.co as a high-risk generic phishing domain, specifically a crypto drainer designed to steal cryptocurrency wallet credentials. The domain mimics legitimate crypto platforms to trick users into connecting their wallets, after which the connected funds are drained. The threat is severe, as crypto drainers can empty a user's wallet in seconds without requiring further interaction.

Technical indicators show that sushl.co was flagged by 5 out of 95 security vendors on VirusTotal, indicating moderate but significant detection. The domain was registered through DYNADOT LLC on March 28, 2026, and appears on three security blocklists. Google Safe Browsing flags the domain for phishing, and AlienVault OTX reported it in one threat intelligence pulse. These indicators confirm the domain's malicious intent.

As of this report, sushl.co has been taken offline, but the underlying threat remains. Users who may have interacted with the domain should immediately revoke any wallet permissions and transfer remaining assets to new wallets. PhishDestroy recommends monitoring for similar domains and avoiding unsolicited links related to cryptocurrency platforms.