vitadao[.]sushi[.]onl

vitadao.sushi.onl was registered on 21 February 2026 and is currently taken offline. The site resolved to the Cloudflare‑owned address 172.67.133.179, announced as being located in the United States under ASN 13335 (Cloudflare, Inc.). The TLS certificate presented the identifier “WE1”, which does not correspond to the legitimate SushiSwap domain and is typical of infrastructure used by opportunistic actors. The page title returned by the server, “Stake VITA | Sushi”, explicitly references the Sushi brand, confirming that the domain was intended to impersonate SushiSwap in a crypto‑related scam.

VirusTotal recorded a single positive detection out of 93 scanning engines, indicating that at least one security product identified the site as malicious. The domain appears on one public blocklist, PhishDestroy, which has already flagged it for removal. Independent reputation scoring from Gridinsoft assigned a trust rating of 0 out of 100, reflecting an extremely low confidence in the site’s legitimacy. The intelligence categorizes the operation as a “Crypto Scam”, consistent with the brand‑targeted wording in the title.

No additional evidence such as login forms or credential harvesting mechanisms has been published, and the site’s content has not been captured because it was taken offline before further analysis could be performed. Defenders should continue to block the domain and its associated IP address, add the host to local deny lists, and monitor for newly registered domains that combine “sushi” or “vita” with the .onl TLD or that resolve to Cloudflare IP ranges. Ongoing surveillance of the ASN 13335 space is advisable, as the same infrastructure is frequently reused by unrelated malicious campaigns. Organizations that rely on SushiSwap should educate users about the specific page title and advise them to verify URLs before interacting with any staking or investment service.