twt-sushi[.]pro

Analysis indicates that twt-sushi.pro was registered on February 21, 2026 and is currently offline. The site was identified as a crypto‑scam that impersonates SushiSwap, as reflected in the page title "Stake SUSHI | Sushi" and the brand target designation. Infrastructure inspection shows the domain resolves to IP address 107.172.83.150, hosted in the United States under AS36352 (HostPapa). The SSL certificate associated with the domain is rated R10.

The domain appears on a single security blocklist and has been blocked by PhishDestroy, confirming that at least one external threat‑intel source has flagged it. VirusTotal reports indicate the domain was scanned by 93 vendor engines without any detections, but the absence of detections does not constitute a safety guarantee. Given the limited visibility—no public Safe Browsing verdict, no OTX sightings, and no additional blocklist entries—the primary evidence consists of the registration date, hosting details, SSL rating, blocklist inclusion, and the brand‑impersonation indicator. Defenders should update URL filtering rules to block twt-sushi.pro, monitor for any future resurrection of the domain, and incorporate the IP address 107.172.83.150 into network‑level deny lists.

Continuous observation of the hosting provider (HostPapa) for related domains is advised, as opportunistic actors often reuse the same infrastructure. Threat‑hunting teams should also query logs for any traffic to this domain or its IP to detect residual attempts. While the domain is presently offline, its prior activity suggests a targeted attempt to lure SushiSwap users into a staking‑related cryptocurrency scheme, and remediation steps should reflect that risk profile.