sushi-raca[.]top

The domain sushi-raca.top was registered on 2026-02-21 and was observed serving a page titled “Stake SUSHI | Sushi”. The page title suggests an attempt to lure users interested in staking the SUSHI token, and the domain is explicitly listed as impersonating the SushiSwap platform. Infrastructure analysis shows the domain resolves to IP 107.172.83.150, which belongs to AS36352 (HostPapa) located in the United States. The hosting provider is a typical shared‑hosting service, which is frequently abused for short‑lived malicious sites. Detection services have flagged the domain. VirusTotal reports that 8 of 93 scanned security vendors flagged the site, indicating a non‑trivial detection rate.

Independent reputation services assign very low scores: Scamadviser rates the site 21/100, and Gridinsoft assigns a trust score of 0/100. The domain is currently listed on four security blocklists and is blocked by the PhishDestroy, Polkadot, Enkrypt, and Codeesura filtering platforms. These blocklists classify the activity as a crypto scam, consistent with the “Crypto Scam” label in the intelligence feed. The SSL certificate presented for the domain is identified as “R11”, which is a low‑trust or self‑signed certificate commonly used by malicious operators to avoid certificate validation errors. The site’s HTTP status is reported as offline at the time of analysis, which may indicate that the operators have taken the site down after initial distribution. What remains uncertain is the exact content delivered to victims, as the page has not been captured in a screenshot or HTML archive.

No additional indicators such as phishing form fields, JavaScript payloads, or redirection URLs have been disclosed. Consequently, threat hunters should treat any traffic to sushi-raca.top as potentially malicious and monitor for related command‑and‑control patterns or credential harvesting attempts.