sushi-nvb[.]top

Analysis as of July 22, 2026 indicates that the domain sushi-nvb.top was registered on 21 February 2026 and is currently taken offline. The site presented the page title “Stake SUSHI | Sushi,” directly referencing the SushiSwap brand, and is classified as a crypto-scam impersonating SushiSwap. Technical resolution points to the IPv4 address 107.172.83.150, which is hosted in the United States under AS36352 (HostPapa). The SSL certificate associated with the domain is identified as R11, a low‑trust indicator that aligns with the Gridinsoft trust score of 0 out of 100.

VirusTotal analysis shows that five of ninety‑three scanning engines flagged the domain as malicious, reinforcing the suspicion of illicit activity. The domain appears on four external blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—demonstrating that multiple threat‑intelligence services have already categorized it as dangerous. Although the site is no longer reachable, defenders should continue to block both the domain and its resolving IP address at network perimeter devices, DNS filtering services, and endpoint protection platforms.

Security teams are advised to add sushi-nvb.top to internal blacklists, monitor for any resurrection attempts, and correlate any outbound traffic to 107.172.83.150 with potential crypto‑drain exploits. Continuous review of updates from the listed blocklists and VirusTotal scans is recommended to capture any future re‑registration or variation of the infrastructure. The convergence of a brand‑specific page title, low SSL trust rating, multiple vendor detections, and presence on reputable blocklists makes sushi-nvb.top a high‑confidence indicator of a targeted crypto‑scam campaign against SushiSwap users.