sushi-ksn[.]top

The domain sushi-ksn.top was registered on February 21, 2026 and subsequently resolved to the IP address 107.172.83.150, which is allocated to HostPapa in the United States under autonomous system AS36352. The site presented the page title "Stake SUSHI | Sushi" and explicitly impersonated the SushiSwap brand, aligning with a crypto‑scam classification. Security infrastructure recorded the domain as being blocked by PhishDestroy and listed on a single security blocklist. Reputation services assigned extremely low scores: Scamadviser reported a trust rating of 1 out of 100, while Gridinsoft assigned a score of 0 out of 100, indicating a high likelihood of malicious intent. The SSL certificate was identified with a rating of R10, suggesting weak or improperly configured encryption. VirusTotal analysis returned seven positive detections out of ninety‑three scanned vendors, reinforcing the malicious assessment. The overall risk level was designated as elevated, and the current operational status is offline, indicating that the site has been taken down or otherwise rendered inaccessible.

Analysis of the available data confirms that sushi-ksn.top was deliberately crafted to lure victims into a fraudulent crypto‑related interaction, leveraging the reputable SushiSwap brand to increase credibility. The combination of a recent registration date, low trust scores, a weak SSL rating, and multiple vendor detections provides a robust evidentiary basis for classification as a confirmed brand‑impersonation scam. Uncertainties remain regarding the specific phishing kit or any additional infrastructure components that may have been used, as no further technical artefacts have been disclosed.

Defenders should continue to block the domain and its associated IP address at network perimeters, update internal threat feeds with the observed indicators, and monitor for any re‑use of the hosting provider or ASN in future campaigns. Given the elevated risk rating, inclusion of sushi-ksn.