aio[.]sushiswap[.]tech

This domain, aio.sushiswap.tech, was registered on September 16, 2025 through Dynadot LLC and is currently listed as offline. The authoritative nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com resolve the domain to the IPv6 address 2606:4700:3031::6815:20aa, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No TLS certificate is presented, indicating that HTTPS connections are not established. The page title returned by the HTTP response is “Just a moment…”, a generic placeholder that provides no insight into the content.

Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist. PhishDestroy has already blocked the site, and VirusTotal reports that 2 of 95 scanned security vendors flagged the domain, confirming a minimal but non‑zero detection rate. The campaign is classified as a crypto‑scam impersonating the SushiSwap brand, aligning with the reported brand target. Because the site is hosted behind Cloudflare, attribution of the underlying server infrastructure is obscured, and no further host‑level indicators are available.

Defenders should continue to block the domain at DNS and proxy layers, monitor for any resurrection of the domain or similar sub‑domains, and update detection signatures to include the observed IPv6 address and the specific nameserver pair. Additional investigation of the two vendors that raised alerts on VirusTotal may reveal payload characteristics, and any inbound traffic to the IPv6 host should be logged for forensic analysis. The absence of an SSL certificate and the low trust score further suggest that the site is not intended for legitimate user interaction.