trade-sushi[.]xyz

PhishDestroy identifies trade-sushi.xyz as a brand impersonation threat targeting SushiSwap users. This domain was created specifically to deceive visitors into believing they are interacting with the legitimate SushiSwap platform, likely to steal credentials or cryptocurrency. No specific drainer kit has been associated with this domain, but the phishing intent is clear.

The technical profile of trade-sushi.xyz is concerning. VirusTotal reports 5 out of 95 security vendors flagging this domain as malicious. The domain was registered through Dynadot LLC on June 03, 2026, and resolves to IP address 172.67.185.33. It uses an SSL certificate issued by Let's Encrypt (serial E7), which gives it a false sense of legitimacy. The page title was set to "Google" to further deceive users. The domain also appears on 3 security blocklists and is not listed on Google Safe Browsing (GSB).

As of the latest analysis, trade-sushi.xyz is offline and has been taken down by authorities or the registrar. PhishDestroy recommends users remain vigilant and avoid interacting with any messages or websites referencing SushiSwap via this domain. If you have already visited the site or entered any credentials, change your passwords immediately and enable two-factor authentication on your accounts. Always verify URLs independently before providing sensitive information.