elonsushi[.]top

The domain elonsushi.top was created on 18 May 2026 and is presently active. Registration was performed through a well‑known registrar and the domain resolves to a single IPv4 address. The site returns an HTTP 302 status code, directing visitors away from the original URL. The observed page title is “Google”, which does not match the targeted brand, indicating a likely impersonation attempt aimed at users of the SushiSwap platform. The hosting infrastructure points to a data centre located in Canada, where the sole IP address 188.114.96.3 is assigned. The name servers listed are buck.ns and emily.ns, both under a major content‑delivery network. TLS negotiation succeeds using a free, publicly trusted certificate, confirming the presence of encrypted traffic. No additional sub‑domains or alternate A records were identified during resolution. Threat intelligence feeds have documented the domain on three separate blocklists and it appears in a single AlienVault OTX pulse. Reputation scoring from an antivirus‑based engine assigns a zero out of one hundred, reflecting extreme distrust. VirusTotal reports a single detection out of ninety‑five scanners, reinforcing the malicious classification. The combination of a misleading page title, redirection, and low trust score aligns with known brand‑impersonation campaigns. Analysts should treat elonsushi.top as a confirmed high‑risk impersonation vector. Immediate mitigation steps include adding the domain and its resolving IP to deny‑lists, enforcing DNS‑level blocking, and monitoring outbound traffic for attempts to resolve the address. Continued observation is advised to capture any downstream payloads that may be served after the redirect, as current evidence is limited to the initial HTTP response.