sushi-obol[.]top

Analysis of the domain sushi-obol.top indicates it was established as a crypto scam targeting users of the decentralized exchange SushiSwap. The domain was registered on February 21, 2026, and resolved to the IP address 107.172.83.150, hosted on AS36352 (HostPapa) in the United States. The page title captured during active monitoring was 'Stake SUSHI | Sushi,' directly referencing the SushiSwap brand and its native token, SUSHI. This aligns with the classification of brand impersonation and crypto scam as documented in threat intelligence sources.

The domain appeared on one security blocklist and was blocked by PhishDestroy. A single security vendor flagged the domain on VirusTotal, though the specific detection context remains unverified. The SSL certificate was issued by R11, a common issuer for both legitimate and malicious domains, offering no conclusive attribution. As of July 22, 2026, the domain is offline, reducing immediate exposure but leaving residual risk for users who may have interacted with it prior to takedown.

Defenders should treat this domain as part of a broader pattern of crypto-themed phishing infrastructure. Network-level blocking of the IP 107.172.83.150 and monitoring for newly registered lookalike domains (e.g., typosquatting 'sushi' or 'obol') are recommended. No evidence of a phishing kit or additional infrastructure was provided, so further investigation into related domains or hosting patterns may be necessary. The exact content and functionality of the site remain unanalyzed due to its offline status.