sushi-jasmy[.]top

Analysis of the domain sushi-jasmy.top indicates a confirmed brand-impersonation operation targeting SushiSwap users. The site was registered on 21 February 2026 and, as of 25 July 2026, is taken offline. The public page title returned "Stake SUSHI | Sushi", which aligns with the declared scam type of a crypto-draining scheme. The domain resolves to IP 107.172.83.150, an address hosted in the United States under ASN 36352 (HostPapa). Reputation services assign low confidence scores: Gridinsoft rates the domain 0/100, and Scamadviser reports a trust score of 36/100.

VirusTotal scans show six of ninety-three security vendors flagging the domain as malicious. The host is listed on four independent security blocklists and has been actively blocked by services including PhishDestroy, Polkadot, Enkrypt, and Codeesura. SSL inspection reveals the certificate is identified as "R11", a low‑trust issuance typical of fast‑generated certificates used by malicious actors. Collectively, these data points confirm that sushi-jasmy.top was used to lure cryptocurrency stakeholders by masquerading as a legitimate SushiSwap staking portal. The current offline status suggests the operators have paused activity, but historical evidence confirms malicious intent.

Defenders should continue to block the domain at network perimeter and DNS layers, monitor the associated IP for any re‑activation, and add the IP and certificate fingerprint to internal blocklists. Security teams should also update phishing‑filter rules with the observed page title "Stake SUSHI | Sushi" to catch any future replicas. Users of SushiSwap should be warned that any unsolicited links directing to this domain are malicious, and that legitimate staking operations are only available through official SushiSwap domains. Ongoing observation is recommended in case the infrastructure is repurposed under a new domain.