wld[.]sushi-cn[.]biz

PhishDestroy has confirmed that wld.sushi-cn.biz is a phishing site engaged in brand impersonation, specifically targeting the decentralized exchange SushiSwap. The domain is currently offline, but its recent activity poses a significant risk to users who may have encountered it while it was active. The site was designed to mimic legitimate SushiSwap pages to steal credentials or funds.

Technical analysis reveals that this domain was registered through Dynadot LLC and created on October 31, 2025. It resolves to IP address 142.250.80.4 and was flagged by 9 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. Additionally, it appears on one security blocklist, and the page title was observed as "Google," likely an attempt to evade detection. Notably, the site lacked an SSL certificate, further reducing its trustworthiness.

Given that the site is now offline, the immediate threat has diminished, but users should remain vigilant. PhishDestroy recommends that anyone who interacted with wld.sushi-cn.biz change their SushiSwap-related passwords immediately and enable two-factor authentication. Always verify URLs before entering sensitive information and rely on official channels to access cryptocurrency platforms.