lgns-sushi[.]pro

This domain, lgns-sushi.pro, was registered on 21 February 2026 and resolves to the IPv4 address 107.172.83.150, which belongs to AS36352 operated by HostPapa in the United States. The site presented the page title “Stake SUSHI | Sushi”, indicating a focus on the Sushi cryptocurrency token, and explicitly impersonates the decentralized exchange SushiSwap. The observed scam type is classified as a crypto‑scam, suggesting attempts to lure victims into staking or delegating SUSHI tokens under false pretenses. The TLS certificate associated with the host is identified as an R11‑level certificate, providing encrypted transport but offering no assurance of legitimacy.

The domain was listed on a single security blocklist and was actively blocked by the PhishDestroy service at the time of analysis. VirusTotal scanned the site with 93 antivirus engines and reported no detections; however, the absence of detections does not constitute proof of safety. The site’s current status is reported as taken offline, which may be temporary or the result of takedown actions. Open questions remain regarding the exact content served, the presence of any malicious scripts, and whether the domain was used in broader campaigns targeting SushiSwap users.

Defensive recommendations include adding the domain and its IP address to deny‑list rules across perimeter firewalls and DNS filtering services, monitoring HostPapa‑hosted infrastructure for similar patterns, and reviewing any internal logs for connections to 107.172.83.150. Analysts should also watch for newly registered domains that reuse the “sushi” keyword combined with other TLDs, as the naming pattern suggests a template‑driven operation. Continuous re‑evaluation is advised should the domain reappear or related indicators emerge.