gmesushi[.]top

This domain, gmesushi.top, was registered on August 22, 2025 through NameSilo, LLC. The domain resolves to the IP address 104.21.44.216, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. Both authoritative nameservers are hosted by Cloudflare (buck.ns.cloudflare.com and emily.ns.cloudflare.com). No TLS certificate is presented for the site, indicating that HTTPS is not available. The page title returned when the site was reachable is “Nur einen Moment…”, a German phrase meaning “Just a moment…”, but the content of the page has not been publicly disclosed. The domain is classified as a crypto‑scam that impersonates the SushiSwap brand, and it appears on one security blocklist.

The Gridinsoft trust score for the domain is 0 out of 100, reflecting a very low reputation. VirusTotal analysis shows that two of ninety‑five scanning engines flagged the domain, confirming that at least a subset of security products consider it malicious. The site has been taken offline and is currently listed as “offline” by monitoring services, while PhishDestroy reports it as blocked. Evidence from the registration record, DNS configuration, and hosting attribution collectively points to a typical phishing infrastructure that leverages Cloudflare’s CDN to mask the true origin of the traffic.

The absence of an SSL certificate and the minimal detection coverage suggest a short‑lived campaign that relied on rapid domain turnover. Because the domain is already offline, immediate threat to end users is reduced, but the underlying pattern—registration of a brand‑related domain, use of Cloudflare DNS, and minimal reputation signals—remains observable. Defenders should ensure that network and email filters block both the fully qualified domain name and its resolved IP address, monitor for any resurgence of the same registrar or similar naming patterns, and incorporate the domain’s identifiers (seed e96a55, page title, and trust score) into threat‑intel feeds.