sushi-ena[.]top

The domain sushi-ena.top was registered on February 21, 2026 and is currently listed as offline. DNS resolution points to the IPv4 address 107.172.83.150, which belongs to the HostPapa hosting provider (AS36352) and is geolocated in the United States. An SSL certificate identified as R11 is present on the site, indicating that HTTPS was configured before the domain was taken down. The page title returned by the server is "Stake SUSHI | Sushi," which aligns with the declared scam type of a crypto scam targeting users of the SushiSwap platform.

The domain is specifically marked as impersonating SushiSwap, a well‑known decentralized exchange, and therefore falls under the brand‑impersonation threat category. Detection data show that six of ninety‑three security vendors on VirusTotal flagged the domain, suggesting a moderate level of malicious confidence among scanners. The domain appears on four independent blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—demonstrating that multiple threat‑intelligence feeds have recognised it as abusive. No additional public intelligence, such as OTX or Safe Browsing entries, is available beyond the listed blocklist memberships.

Given the limited exposure window (the domain was active for only a few months before being taken offline) and the lack of publicly disclosed payload or credential‑harvesting mechanisms, the precise operational details of the campaign remain uncertain. Defenders should update their URL filtering and DNS sink‑hole rules to include sushi-ena.top, monitor the hosting provider’s IP range for related activity, and consider the six VirusTotal detections as a signal to prioritize related alerts. Continuous observation of the associated IP address and any future registrations under the same registrar is recommended to detect potential re‑use of the infrastructure for further brand‑impersonation attempts.