sushi-joe[.]top

Analysis of the domain sushi-joe.top shows a high‑risk brand‑impersonation campaign targeting users of the SushiSwap platform. The domain was registered on February 21, 2026 through NameSilo, LLC and resolves to the IPv4 address 107.172.83.150, which is announced by AS36352 (HostPapa) and geolocated to the United States. DNS resolution is handled by ns1.ns306.parklogic.com. and ns2.ns306.parklogic.com., and the site presents a valid SSL certificate (R10) while returning HTTP 200 for the landing page.

The landing page bears the title "Stake SUSHI | Sushi" and mimics the visual style of SushiSwap, a well‑known decentralized finance service. The page solicits cryptocurrency deposits under the pretense of staking SUSHI tokens, a classic credential‑harvesting vector focused on financial loss. Evidence of the fraudulent intent is reinforced by the presence of a brand name in the title and the alignment of the page content with known SushiSwap terminology.

Reputation signals indicate that the site is actively abused. It appears on four independent security blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—and VirusTotal records 11 out of 95 security vendors flagging the domain as malicious. The Gridinsoft trust score registers at 0 / 100, confirming the lack of legitimacy. The domain remains live as of the report date, July 12 2026, and is classified with a high risk level.

Defenders should immediately block traffic to sushi-joe.top at perimeter devices and update intrusion‑detection signatures to include its IP address 107.172.83.150. Continuous monitoring of the associated nameservers and ASN is advised to detect potential re‑hosting attempts. User‑focused awareness campaigns should highlight the unauthorized use of the SushiSwap brand and the specific URL pattern observed, encouraging verification of TLS certificates and domain names before any cryptocurrency transaction.