susilswap[.]fi

The domain susilswap.fi was registered on 21 February 2026 and currently resolves to the IPv4 address 178.16.53.184, which is advertised as belonging to AS202412 Omegatech LTD in the Netherlands. The host is presenting an SSL certificate rated R13, indicating a low trust level. VirusTotal analysis shows that 16 of 93 scanning engines flag the domain as malicious, and the domain appears on a single security blocklist. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment.

The site is listed in 13 AlienVault OTX threat‑intelligence pulses and is actively blocked by the PhishDestroy feed. A single security blocklist entry and the PhishDestroy block indicate that the domain is already recognized by external defenses. The page title returned from the HTTP response is "SushiSwap", while the threat intelligence tags the campaign as a brand‑impersonation targeting Coinbase and categorizes the activity as a crypto‑scam. The domain is presently offline, but the infrastructure details remain observable.

Defenders should add 178.16.53.184 to network‑level deny lists, enforce DNS filtering for susilswap.fi, and ensure that any endpoint security solutions reference the VirusTotal detection count and OTX pulse identifiers. Continuous monitoring of the certificate R13 rating and future registration attempts under the same registrar is advised, as the early creation date suggests a short‑life‑cycle operation. Until further evidence emerges, the combination of low trust scores, multiple vendor detections, and confirmed blocklist listings justifies a high confidence classification of the domain as a malicious crypto‑impersonation site.