sushi-giza[.]top

The domain sushi-giza.top was created on February 21, 2026 and is identified as a brand‑impersonation site targeting SushiSwap. Analysis shows the site resolved to IP address 107.172.83.150, which is allocated to HostPapa (AS36352) and geolocated to the United States. The TLS certificate presented is labeled R10, indicating a low‑trust certificate. The page title returned by the server was "Stake SUSHI | Sushi," matching the crypto‑related theme reported in the intelligence.

VirusTotal scans recorded three detections out of ninety‑three security vendors, confirming malicious activity. The domain appears on four security blocklists and has been explicitly blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. Additional reputation data shows a Gridinsoft trust score of 0 out of 100, reinforcing the classification as a crypto scam. The site was categorized as a Crypto Scam and was actively impersonating the SushiSwap brand, likely aiming to lure victims into staking or transferring SUSHI tokens.

As of the report date, July 24, 2026, the domain is offline, but its infrastructure—particularly the hosting IP and SSL fingerprint—remains observable. Defenders should continue to block the domain and associated IP at network perimeters, incorporate the domain and IP into threat‑intel feeds, and monitor for any re‑registration or similar patterns. Updating web‑filtering and endpoint protection signatures to reflect the three VirusTotal detections will help mitigate residual risk. Continuous observation of the hosting provider’s IP range for new malicious registrations is also advised.