sushi-cn[.]biz

Analysis indicates that the domain sushi-cn.biz was registered on October 31, 2025 through Dynadot LLC and is presently taken offline. The authoritative nameservers apollo.ns.cloudflare.com and meera.ns.cloudflare.com resolve the domain to the IP address 142.250.185.100, which belongs to AS15169 owned by Google LLC and is geolocated in the United States. No TLS certificate is presented, meaning the site would have been served over plain HTTP. The page title returned by the HTTP response is “Google”, offering no direct reference to the targeted brand.

The domain is listed on one security blocklist and has been specifically flagged by PhishDestroy as an impersonation of the SushiSwap brand, classified as a crypto‑scam. Independent scanning on VirusTotal resulted in five of ninety‑five antivirus engines generating a detection, reinforcing the malicious classification. Gridinsoft assigns a trust score of 0 out of 100, indicating a completely untrusted reputation. The lack of an SSL certificate, combined with the use of Cloudflare name servers and a Google‑owned hosting IP, is a pattern often observed in short‑lived phishing infrastructure that leverages reputable hosting to evade superficial reputation checks.

Because the site is already offline, immediate mitigation focuses on ensuring that network‑level controls block any future resolution of sushi‑cn.biz, and that endpoint and email security solutions incorporate the domain and its associated IP address into their block lists. Organizations using SushiSwap should educate users about unsolicited communications that reference the brand, and monitor for additional domains that share the same registrar, nameservers, or hosting provider. Continuous re‑scanning of the domain on multi‑engine platforms is advised in case the site is re‑hosted or the content changes.