bdxn-sushi[.]cfd

The domain bdxn-sushi.cfd has been identified as a brand impersonation threat specifically targeting the decentralized exchange SushiSwap. This phishing domain attempts to trick users into believing they are interacting with legitimate SushiSwap services, potentially leading to credential theft or wallet compromise. No specific drainer kit was identified in this campaign, but the domain's structure and page title "Um momento…" suggest a fraudulent login or transaction approval flow.

Technical analysis reveals that only 2 out of 95 security vendors on VirusTotal flagged this domain, indicating a low detection rate that could allow it to bypass some security filters. The domain was registered on February 21, 2026, and resolves to IP address 172.67.160.198, which is associated with Cloudflare. The SSL certificate issued is WE1, and the domain currently appears on 4 security blocklists. Despite being taken offline, the domain's recent creation and low VT score highlight the importance of proactive monitoring.

As of the latest update, bdxn-sushi.cfd is offline, meaning the immediate threat has been neutralized. However, users should remain vigilant as similar domains may reappear. PhishDestroy recommends that SushiSwap users always verify URLs carefully, enable two-factor authentication, and avoid entering sensitive information on sites with suspicious domain names. If you have interacted with this domain, change your passwords and revoke any token approvals immediately.