sushi-floki[.]xyz

On July 24, 2026, an analysis of the domain sushi-floki.xyz revealed it to be a brand impersonation campaign targeting SushiSwap, a popular decentralized finance platform. The domain was registered on February 21, 2026, and has been taken offline as of the report date. The page title found was 'Stake SUSHI | Sushi,' which suggests an attempt to mimic SushiSwap's staking functionality. Infrastructure analysis reveals that the domain resolved to the IP address 107.172.83.150, located in the United States and associated with the hosting provider AS36352 HostPapa.

The SSL certificate used was of type R11, which does not inherently indicate security but can lend a false sense of trust to unsuspecting users. This domain has been flagged by multiple security vendors and appears on four known blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. The Gridinsoft trust score for this domain is 0 out of 100, indicating a high level of suspicion.

While the domain is currently offline, the risk level is considered elevated due to its history of impersonating a well-known brand and the presence of multiple security flags. Defenders should remain vigilant and monitor for any reactivation of this domain, as it has been classified as a crypto scam. Additionally, users should be educated to verify the legitimacy of any SushiSwap-related links and to avoid interacting with unverified domains.