sushi-idol[.]top

Analysis of the domain sushi-idol.top indicates a recent brand‑impersonation campaign targeting the decentralized exchange SushiSwap. The domain was registered on 21 February 2026 and resolves to the IPv4 address 107.172.83.150, which belongs to AS36352 operated by HostPapa in the United States. The site’s SSL certificate is rated R10, a low trust score that is typical for malicious infrastructure. The only visible page title returned from the server is “Stake SUSHI | Sushi”, matching the declared crypto‑scam motif.

VirusTotal records show that one of ninety‑three scanning engines flagged the domain, and the domain appears on a single external blocklist. PhishDestroy has already taken the site offline, and the current HTTP status is reported as offline. The combination of a freshly created domain, hosting on a shared provider, a low‑reputation certificate, and limited detection coverage suggests a short‑lived phishing operation designed to lure SushiSwap users into staking or depositing SUSHI tokens. No additional content, login forms, or JavaScript payloads have been disclosed, leaving the exact phishing vector uncertain.

Defenders should immediately add sushi-idol.top to DNS‑based deny lists and block traffic at the perimeter. Continuous monitoring of the hosting ASN (AS36352) and the IP address 107.172.83.150 is advised, as the operator may redeploy the campaign under a new domain. Updating endpoint security signatures with the observed detection pattern and reviewing any internal logs for connections to the identified IP can help mitigate potential exposure. Because the site is already offline, the risk is presently limited, but the observed tactics warrant vigilance for similar SushiSwap‑related impersonation attempts.