rez-sushi[.]pro

This domain, rez-sushi.pro, was registered on 25 June 2025 through NameSilo, LLC. The site presents the page title “Stake SUSHI | Sushi”, indicating a direct attempt to mimic the SushiSwap brand. Infrastructure analysis shows the domain resolves to IP address 107.172.83.150, which belongs to the HostPapa hosting provider (AS36352) located in the United States. The SSL certificate is identified as “R11”, and the Gridinsoft trust score is 0 / 100, highlighting a lack of credibility. VirusTotal scans have flagged the domain on 8 of 93 security vendors, and the domain is listed on the PhishDestroy blocklist, confirming that at least one reputable blocklist has recognized it as malicious. The threat is classified as a crypto scam that impersonates SushiSwap, and the risk level has been assessed as elevated.

The site is currently offline, which may indicate that the operators have taken it down or are rotating infrastructure. At present, no additional infrastructure such as command‑and‑control servers or related domains has been observed, so the full scope of the campaign remains unclear. Defenders should treat any traffic to rez-sushi.pro as potentially dangerous. Block the domain at the DNS, proxy, and firewall layers and monitor for any connections to the associated IP 107.172.83.150.

Because the registrar is NameSilo, consider rapid takedown requests if the domain reappears. Continuous monitoring of threat‑intelligence feeds for re‑registration or new IP assignments is advised. The limited detection footprint—only eight VirusTotal detections and a single blocklist entry—suggests the campaign may be in an early stage or using low‑profile hosting. Nonetheless, the combination of brand impersonation, a zero‑trust score, and the presence on a security blocklist warrants proactive defensive measures, including updating web‑filter rules to flag the “Stake SUSHI” page title and alerting SOC analysts to any user reports involving SushiSwap‑related phishing attempts.