wbtc-sushi[.]top

The domain wbtc-sushi.top was registered on February 21, 2026 and is currently listed as taken offline. Analysis shows the site presented the page title "Stake SUSHI | Sushi," indicating an attempt to masquerade as a SushiSwap service. The infrastructure resolves to the IP address 107.172.83.150, which is owned by HostPapa and assigned to AS36352 in the United States. The SSL certificate associated with the domain is identified as R11, confirming the presence of TLS but offering no additional trust signals.

Multiple independent security feeds have flagged the domain: it appears on four distinct blocklists and has been blocked by the PhishDestroy, Polkadot, Enkrypt, and Codeesura services. VirusTotal reports five detections out of ninety‑five scanning engines, reinforcing the classification of the site as a crypto‑related scam. The observed evidence aligns with the reported scam type of a crypto scam targeting users of the SushiSwap platform. While the page content has not been captured, the combination of the deceptive page title, the association with SushiSwap, and the detection metrics provide strong indicators of malicious intent.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms employed, as no detailed page analysis is available. Defenders should continue to block the domain at network perimeters, monitor DNS queries for the resolved IP, and update endpoint protection signatures to include the five VirusTotal detections. Threat intelligence feeds should be refreshed to ensure continued coverage, and any residual traffic should be investigated for potential compromise of cryptocurrency credentials.