sushi-m[.]top

Analysis of sushi-m.top shows a domain created on 21 February 2026 that is currently taken offline but retains a set of hostile indicators. The site presented a page titled "Stake SUSHI | Sushi", directly referencing the SushiSwap brand, and is classified as a crypto‑scam impersonating SushiSwap. Infrastructure traces reveal the domain resolves to IP address 107.172.83.150, which belongs to the HostPapa hosting network (AS36352) located in the United States. The SSL certificate associated with the domain is identified as R10, a low‑trust certificate commonly observed in malicious deployments.

Reputation services flag the domain on a single security blocklist and PhishDestroy has explicitly blocked it, confirming its identification as a phishing or impersonation vector. Gridinsoft assigns a trust score of 0 out of 100, indicating a complete lack of confidence in the site’s legitimacy. VirusTotal analysis reports that six of ninety‑three scanning engines flagged the domain, providing additional corroboration of malicious activity.

While the domain is presently offline, the combination of brand impersonation, low‑trust SSL, hostile hosting, low trust score, and multiple detection reports suggests a high probability of ongoing or future abuse. Defenders should continue to monitor the IP address for any re‑activation, enforce blocklist entries for the domain and its host, and update internal threat intel feeds to include sushi-m.top as a known SushiSwap impersonation. Network sensors should be tuned to alert on DNS queries or HTTP attempts to the domain, and any residual traffic should be investigated for potential credential or cryptocurrency theft attempts.