sushi-floki[.]top

Analysis of the domain sushi-floki.top indicates a targeted brand‑impersonation campaign aimed at users of the SushiSwap decentralized exchange. The domain was registered on July 16, 2025 through NameSilo, LLC and resolves to the IPv4 address 107.172.83.150, which is hosted in the United States under ASN 36352 (HostPapa). The site presented the page title “Stake SUSHI | Sushi,” aligning with the declared scam type of a crypto scam and the stated impersonation of SushiSwap. VirusTotal records show that six of ninety‑three security vendors flagged the domain as malicious, providing modest but consistent detection across multiple scanners.

The domain is listed on four independent blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—further corroborating its reputational risk. The SSL certificate associated with the host carries an R10 rating, and the Gridinsoft trust score is 0 / 100, indicating a lack of trust from that heuristic. The current operational status is offline, which limits direct observation of payloads or credential‑capture mechanisms, but historical data confirms the presence of a brand‑impersonation landing page. Defenders should consider the domain and its resolving IP address as hostile indicators.

Immediate actions include adding sushi‑floki.top and 107.172.83.150 to network‑level deny lists, ensuring that any DNS resolvers enforce blocklist entries from the four mentioned providers, and monitoring for any resurgence of the domain or related subdomains. Because the site targets cryptocurrency stakeholders, endpoint protection solutions should be configured to alert on attempts to access the URL or any scripts referencing the domain. Continuous threat‑intel feeds should be consulted for potential reuse of the hosting provider or registrar in future campaigns. The evidence presented—registrar details, blocklist presence, vendor detections, SSL rating, and trust score—collectively supports classification of sushi‑floki.