sushi-shib[.]top

The domain sushi-shib.top, registered through NameSilo, LLC, has been identified as a high-risk brand impersonation campaign targeting SushiSwap, a well-known decentralized finance (DeFi) platform. As of July 12, 2026, the domain remains active and is flagged by 12 out of 93 security vendors on VirusTotal. The domain resolves to the IP address 107.172.83.150, which is located in the United States and is associated with RackNerd LLC. The SSL certificate is issued by Let's Encrypt, and the domain was created on February 21, 2026. The domain appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, indicating a recognized threat. The page title is 'Redirecting...', suggesting that the domain may be used to redirect users to a malicious site. Gridinsoft has assigned the domain a trust score of 0/100, reinforcing the high-risk status. Infrastructure analysis reveals that the domain uses nameservers ns1.ns306.parklogic.com and ns2.ns306.parklogic.com. Given the high risk and active status, network defenders are advised to block this domain and monitor for any related IP addresses or subdomains. Users should be educated to verify the official SushiSwap domain and avoid clicking on suspicious links. Further analysis is recommended to determine the exact nature and extent of the redirection and to identify any associated malicious activities.