sushi-ski[.]top

The domain sushi-ski.top was registered on February 21, 2026 and is currently taken offline. Technical analysis shows it resolves to the IPv4 address 107.172.83.150, which belongs to a HostPapa hosting service in the United States under AS36352. The site presented the page title “Stake SUSHI | Sushi,” indicating an attempt to lure victims into a crypto‑related scheme targeting users of the SushiSwap platform. Gridinsoft assigned the domain a trust score of 0 out of 100, reflecting an extremely low reputation.

The SSL certificate was rated R10, suggesting weak or misconfigured encryption. VirusTotal scans returned a single positive detection out of 93 security vendors, confirming that at least one vendor identified malicious behavior. The domain appears on one external security blocklist and has been blocked by the PhishDestroy takedown service, further evidencing its malicious intent. The intelligence tags the activity as a “Crypto Scam” and classifies the threat as brand impersonation of SushiSwap with an elevated risk level.

Defenders should update their threat feeds to include sushi-ski.top as a malicious indicator, enforce blocklisting of the associated IP address 107.172.83.150, and monitor for any residual traffic that may still be directed to the domain via cached DNS entries. Network sensors and endpoint detection platforms should be configured to alert on connections to the HostPapa AS36352 range when associated with crypto‑related payloads. Although the site is offline, the presence of a valid SSL certificate and a partial VirusTotal detection suggests that similar copycat domains may be deployed in the future. Continuous observation of new registrations containing the “sushi” keyword and rapid response to any reappearance of the domain are recommended to mitigate potential phishing campaigns targeting SushiSwap users.