sushi-grt[.]xyz

Analysis of sushi-grt.xyz indicates that the domain is being used for a crypto‑scam campaign targeting users of the SushiSwap platform. The site was registered on 21 February 2026 and resolves to the IP address 107.172.83.150, which is hosted by AS36352 (HostPapa) in the United States. The HTTPS service presents an SSL certificate identified as “R11”, but no further validation details are available. The page title returned by the server is "Stake SUSHI | Sushi", which aligns with the declared impersonation of SushiSwap.

VirusTotal records show that one out of ninety‑three scanning engines flagged the domain, and the domain appears on a single public blocklist. Independent monitoring services such as PhishDestroy have also listed the domain as blocked. The Gridinsoft trust score is 0 / 100, reinforcing the malicious assessment. The overall risk rating is elevated, and the current operational status is offline, suggesting that the malicious infrastructure may have been taken down or is temporarily inaccessible.

While the available data confirms the domain’s association with a crypto‑scam, the specific payload or credential‑harvesting mechanisms have not been observed, and no forensic snapshot of the landing page content is available. Consequently, defenders cannot determine whether the site was delivering malicious binaries, phishing forms, or redirecting traffic to additional infrastructure. Monitoring for re‑appearance of the domain or its IP, as well as for any newly registered domains that resolve to the same hosting provider, is advisable. Organizations should block the domain and the associated IP at perimeter defenses, update threat intelligence feeds with the indicator set (domain, IP, SSL fingerprint, registration date), and continue to watch for related activity targeting SushiSwap users.