xcn-sushi[.]my

The domain xcn-sushi.my was registered on 21 February 2026 and currently resolves to the IPv4 address 107.172.83.150, which is hosted by AS36352 (HostPapa) in the United States. The site is listed as offline at the time of analysis, preventing real‑time content retrieval, but passive DNS and historical records reveal the page title “Stake SUSHI | Sushi”, matching the brand target SushiSwap and confirming a brand‑impersonation intent. The SSL certificate associated with the domain is rated R11, indicating a low trust rating. Threat intelligence sources show the domain appears on five public blocklists and has been reported in a single AlienVault OTX pulse.

Multiple anti‑phishing services—including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura—have independently added the domain to their blocklists. VirusTotal scans report that 15 of 93 security engines flagged the domain as malicious, reinforcing the classification as a crypto‑related scam. The Gridinsoft trust score is 0 out of 100, further confirming the hostile nature of the infrastructure. The combination of brand‑impersonation page title, low‑trust SSL, host provider association, and multiple vendor detections provides concrete evidence that the domain was used to lure victims into a SushiSwap‑related crypto scam.

Because the site is presently offline, investigators cannot verify the current payload or credential‑harvesting mechanisms, leaving the exact phishing vector uncertain. Defenders should continue to block the domain at DNS and proxy layers, update local and cloud‑based threat feeds, and monitor the hosting ASN for any new domains that exhibit similar characteristics. Ongoing observation of the IP address 107.172.83.150 is advised in case the infrastructure is repurposed for future campaigns.