zeta-sushi[.]fit

Analysis indicates that the domain zeta-sushi.fit was registered on August 18 2025 through NameCheap, Inc. The site was configured to resolve to the IP address 172.67.204.117, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The TLS certificate presented for the host is identified as WE1, consistent with a Cloudflare‑issued certificate. The page title returned by the server is “Cierpliwości…”, which does not directly reference the targeted brand but the domain is explicitly listed as impersonating SushiSwap, and the scam type is recorded as a crypto scam. The domain appears on four security blocklists, specifically PhishDestroy, Polkadot, Enkrypt, and Codeesura, confirming that multiple threat intelligence feeds have flagged it.

VirusTotal analysis shows that two of ninety‑three security vendors flagged the domain, providing additional confirmation of malicious intent. The Gridinsoft trust score is 0 out of 100, indicating a lack of trust. Current status is reported as taken offline, but historical activity suggests that the domain was used to target users of the SushiSwap platform. Uncertainty remains regarding the exact content served before takedown, as the page title alone offers limited insight and no visual or functional details have been captured.

Defenders should continue to block the IP address and domain at network perimeter, add the domain to internal blocklists, monitor for new registrations that mimic the SushiSwap brand, and consider employing domain‑generation monitoring for future variants. Ongoing observation of Cloudflare‑hosted infrastructure is recommended, as the provider may host additional malicious assets. The evidence collectively supports an elevated risk classification for this domain.