sushi-com[.]asia

The domain sushi-com.asia is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency exchange. This scam site was designed to deceive users into believing they were interacting with the legitimate SushiSwap platform, likely to steal credentials or manipulate transactions. As of the latest verification, sushi-com.asia has been taken offline, but its prior activity poses a risk to users who may have encountered it during its operational period.

Technical analysis reveals that sushi-com.asia was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, with a Gridinsoft trust score of 0/100. The domain was registered through Dynadot LLC on 2025-10-31 and resolved to the IP address 142.250.181.228, hosted by Google LLC in the US. It appeared on 1 security blocklist, specifically PhishDestroy, and had no SSL certificate. The observed page title was 'Google', and the nameservers were apollo.ns.cloudflare.com and meera.ns.cloudflare.com. No drainer kit was associated with this phishing attempt.

Users who interacted with sushi-com.asia should take immediate steps to secure their accounts. If cryptocurrency transactions were attempted, revoke any token approvals and transfer funds to a new wallet. For those who entered login credentials, change passwords immediately and enable two-factor authentication (2FA) on all related accounts. Monitor accounts for unauthorized activity and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s official security channels to aid in takedown efforts.