sushi-pit[.]top

The domain sushi-pit.top is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a decentralized cryptocurrency exchange. It was designed to deceive users into believing they were interacting with the legitimate SushiSwap platform, likely to harvest credentials or facilitate fraudulent transactions. As of the latest verification, sushi-pit.top has been taken offline, though it previously posed an elevated risk as a cryptocurrency scam.

Technical indicators confirm the malicious nature of sushi-pit.top. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Webroot, and appeared on one security blocklist (PhishDestroy). Registered through NameSilo, LLC on July 05, 2025, it resolved to the IP address 107.172.83.150, hosted by AS36352 (HostPapa) in the US. The SSL certificate was issued by R11, and the observed page title was 'Stake SUSHI | Sushi'. Google Safe Browsing did not flag the domain, but trust scores from Gridinsoft (0/100) and Scamadviser (1/100) further indicate its fraudulent intent.

Users who interacted with sushi-pit.top should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to prevent unauthorized access. If credentials were entered, change passwords on the legitimate SushiSwap platform and enable two-factor authentication. Report the domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or the impersonated brand’s security team, to aid in takedown efforts and protect others from similar scams.