turbo-sushi[.]cfd

The domain turbo-sushi.cfd was registered on February 21, 2026 through NameSilo, LLC. It currently resolves to the IPv4 address 107.172.83.150 and returns HTTP 200 responses, indicating an actively serving web server. The site remains listed as active in recent observations and is classified with a high risk level. It is hosted on infrastructure owned by AS36352 (HostPapa) located in the United States. The authoritative name servers are ns1.ns306.parklogic.com and ns2.ns306.parklogic.com, both belonging to the Parklogic DNS service. The TLS certificate associated with the domain received an R10 rating, suggesting a low trust score, which aligns with the Gridinsoft trust score of 0 out of 100. The page title returned by the server is “Stake SUSHI | Sushi”, directly referencing the SushiSwap brand. This matches the declared brand target of SushiSwap and the scam type identified as cryptocurrency, indicating a deliberate brand‑impersonation attempt. VirusTotal analysis shows that 2 of 95 security vendors flagged the domain, and the domain appears on four independent security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. These signals collectively confirm malicious intent despite the relatively low vendor detection count. Defenders should add turbo-sushi.cfd to network‑level deny lists and ensure endpoint protection solutions block connections to the resolved IP address 107.172.83.150. Continuous monitoring of the associated nameservers and any future DNS changes is advised, as the infrastructure could be repurposed. Organizations using SushiSwap services should educate users about the existence of this impersonation site and advise verification of legitimate URLs before any transaction.