sushi-dext[.]top

The domain sushi-dext.top was registered on July 04, 2025 through NameSilo, LLC and is currently active. Its primary malicious behavior is brand impersonation targeting the SushiSwap ecosystem, presenting a page titled “Stake SUSHI | Sushi” that mimics legitimate staking interfaces.

Infrastructure analysis shows the domain resolves to IP address 107.172.83.150, which belongs to AS36352 (HostPapa) and is geolocated in the United States. The site serves HTTP 200 responses and presents an SSL certificate labeled R10, indicating a valid TLS handshake despite the malicious intent. The page title directly references “Stake SUSHI”, a clear attempt to lure SushiSwap users into credential or private‑key submission.

Reputation metrics reinforce the malicious profile: Gridinsoft assigns a trust score of 0 out of 100, and the domain is listed on four independent security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. VirusTotal analysis records seven out of ninety‑five scanning engines flagging the domain as malicious, consistent with a cryptocurrency‑focused scam.

Defenders should block resolution to 107.172.83.150 at the network perimeter, add sushi-dext.top to URL filtering policies, and monitor for any credential or private‑key submissions that match the “Stake SUSHI” workflow. Continuous observation of the host’s ASN and any future certificate changes is advised, as well as sharing the indicator set with threat‑intelligence platforms to accelerate collective mitigation.