sushi-andy[.]xyz
“Stake SUSHI | Sushi”
sushi-andy.xyz — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: SushiSwap; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 8/95 (alphaMountain.ai, BitDefender, CyRadar, Forcepoint ThreatSeeker, Fortinet); PhishDestroy score 85/100. Registrar: NameSilo.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain sushi-andy.xyz indicates it was actively impersonating the decentralized exchange SushiSwap, specifically targeting users with a fraudulent staking interface. The domain, registered on February 21, 2026, through NameSilo, LLC, resolved to the IP address 107.172.83.150, hosted on AS36352 (HostPapa) in the United States. Cloudflare nameservers (celine.ns.cloudflare.com and lex.ns.cloudflare.com) were in use, and the SSL certificate was issued under the R10 root, a configuration commonly observed in phishing infrastructure leveraging Cloudflare services. The page title, 'Stake SUSHI | Sushi,' directly references SushiSwap’s native token and staking functionality, aligning with the scam type classified as a crypto scam.
Detection by security vendors remains limited but notable: eight of 95 engines on VirusTotal flagged the domain as malicious at the time of assessment, and it appeared on one security blocklist, including PhishDestroy. Trust scores from Gridinsoft and Scamadviser both assigned the lowest possible rating (0/100 and 1/100, respectively), reinforcing its high-risk classification. As of July 24, 2026, the domain is offline, though its prior infrastructure and registration details remain relevant for historical tracking.
Defenders should treat any prior resolution of this domain as malicious and assess logs for connections to 107.172.83.150 or interactions with the 'Stake SUSHI | Sushi' page title. While the exact content of the site is not yet analyzed, the combination of brand impersonation, low trust scores, and detection by multiple security vendors confirms its use in a targeted crypto scam. Further monitoring of related infrastructure, particularly domains registered through NameSilo or resolving to HostPapa’s AS36352, is recommended.
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Intelijen Forensik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive