sushi-omikami[.]xyz

Analysis of sushi-omikami.xyz, registered on February 21 2026, indicates that the site was used in a brand‑impersonation campaign aimed at SushiSwap users and is now taken offline. The domain resolved to the IPv4 address 107.172.83.150, which is owned by AS36352 (HostPapa) and geolocated to the United States. Infrastructure reputation metrics are extremely low: Gridinsoft assigns a trust score of 0 / 100 and Scamadviser a score of 1 / 100, both of which are consistent with malicious hosting. The SSL certificate presented is identified as R10, a certificate frequently observed on fraudulent sites. During its brief availability the page title returned was “Stake SUSHI | Sushi”, directly referencing the SushiSwap brand and reinforcing the impersonation claim.

Threat intelligence sources have placed the domain on a single security blocklist and PhishDestroy lists it as a blocked entity. VirusTotal scans recorded detections by seven of ninety‑three scanning engines, providing independent confirmation that malicious code or content was present. The site is categorized in the supplied intelligence as a “Crypto Scam”, matching the observed use of the Sushi brand to lure victims into fake staking operations.

Because the site is currently offline, the exact content of the landing page—including any credential‑capture forms or malicious payloads—cannot be verified. However, the combination of a brand‑aligned page title, low‑reputation SSL certificate, poor trust scores, blocklist presence, and multiple VirusTotal detections creates a high confidence assessment that the domain was deployed for fraudulent cryptocurrency activities. Defenders should ensure that sushi-omikami.xyz is added to internal blocklists and that the associated IP address 107.172.83.150 is monitored for any future re‑use. Users of SushiSwap should be warned against clicking unsolicited links that claim to enable SUSHI staking, as such URLs may originate from this domain.