sushi-axgt[.]top

This domain, sushi-axgt.top, was registered on February 21, 2026 via NameSilo, LLC. The authoritative nameservers are lex.ns.cloudflare.com and celine.ns.cloudflare.com, indicating use of Cloudflare DNS. The domain resolves to the IPv4 address 107.172.83.150, which is announced by AS36352 and is hosted by HostPapa in the United States. The site is currently offline, and the takedown has been credited to PhishDestroy. The page title returned during the brief live period was “Stake SUSHI | Sushi”, and the content was classified as a crypto‑scam impersonating the SushiSwap platform.

A TLS certificate bearing the R10 rating was observed, confirming HTTPS support. Reputation services show a Gridinsoft trust score of 0 out of 100, and the domain appears on one security blocklist. VirusTotal analysis recorded three detections out of ninety‑three scanning engines, providing additional corroboration of malicious intent. The combination of a brand‑specific page title, the crypto‑scam label, and the low trust score suggests an attempt to lure victims into staking or delegating SUSHI tokens on a fraudulent interface.

At present, the exact phishing kit or payload has not been recovered, and no further infrastructure such as command‑and‑control servers has been linked to the IP address. Defenders should continue to block the domain and its resolving IP at network perimeters, add the host to host‑based allowlists, and monitor for any re‑registration attempts. Security teams should also update URL filtering and Safe Browsing feeds with the domain name, and consider sharing the indicators of compromise with industry‑wide threat‑sharing platforms. Ongoing observation of the hosting provider’s address space is advised in case additional malicious domains are launched from the same subnet.