reth-sushi[.]cfd

This domain, reth-sushi.cfd, presents a targeted brand impersonation threat against SushiSwap, a decentralized finance protocol. Analysis indicates the site mimics legitimate SushiSwap interfaces to deceive users into connecting cryptocurrency wallets or submitting sensitive credentials, enabling unauthorized access to digital assets. The fraudulent portal specifically exploits trust in DeFi platforms by replicating transaction flows, liquidity pool interfaces, or staking mechanisms, increasing the likelihood of financial loss for unsuspecting visitors. Infrastructure analysis reveals concrete indicators of malicious intent. The domain was registered on September 05, 2025, through NameSilo, LLC, and resolves to the IP address 172.67.189.95. Security vendors have flagged reth-sushi.cfd on VirusTotal, with 2 out of 95 engines detecting malicious activity. Additionally, the domain appears on four distinct security blocklists, including Polkadot, Codeesura, PhishDestroy, and Enkrypt. The Gridinsoft trust score of 0 out of 100 further corroborates the elevated risk level associated with this infrastructure. Users who visited reth-sushi.cfd should take immediate action to mitigate potential compromise. First, revoke any wallet connections or permissions granted to the domain via decentralized application interfaces. Second, monitor connected wallets for unauthorized transactions and transfer assets to a new wallet if suspicious activity is detected. Third, reset credentials for any accounts where login details may have been entered on the site. Finally, report the domain to relevant security teams and consider submitting samples to threat intelligence platforms to aid in broader detection efforts.