rekt-sushi[.]xyz

On July 22, 2026, the domain rekt-sushi.xyz was identified as an active brand‑impersonation site targeting SushiSwap. The domain was registered on August 18, 2025 through NameCheap, Inc., and resolves to the Cloudflare‑managed address 104.21.96.1 (AS13335, United States). DNS resolution is served by ashton.ns.cloudflare.com and cheryl.ns.cloudflare.com, confirming the use of Cloudflare’s CDN and security services. The site presents an HTTP 302 redirect and serves an SSL certificate issued by Google Trust Services under the WE1 intermediate, indicating a valid TLS handshake but offering no protection against malicious content.

The page title observed during retrieval is “Nur einen Moment…”, which does not reveal any direct reference to the targeted brand. A Gridinsoft trust score of 0 out of 100 further highlights the poor reputation of the host. VirusTotal analysis shows that 2 of 95 security vendors have flagged the domain, reinforcing the suspicion of malicious intent. The domain appears on four external blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, all of which have already taken mitigation actions.

No additional technical artefacts such as known phishing kits or malware payloads were disclosed in the available intelligence. The combination of a recent registration date, low trust score, Cloudflare‑based infrastructure, low‑frequency vendor detection, and inclusion on multiple blocklists constitutes a high‑risk profile for credential harvesting or crypto‑related fraud aimed at SushiSwap users. Defenders should add rekt-sushi.xyz to domain block lists, enforce TLS inspection, and monitor for any outbound connections to the associated IP address. Continuous re‑evaluation is recommended, as further content analysis may reveal additional indicators of compromise.