akas[.]sushiswap[.]buzz

The domain akas.sushiswap.buzz was registered on September 16, 2025 through Dynadot LLC. Its authoritative name servers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com resolve the host to the IPv6 address 2606:4700:3030::ac43:b9df, which belongs to Cloudflare’s AS13335 network and is geolocated in the United States. No TLS certificate is presented, indicating that the site does not offer HTTPS encryption. The page that was observed returns the title “Just a moment…”, a generic placeholder often used by Cloudflare‑protected sites. According to the Gridinsoft trust scoring system the domain received a score of 0 out of 100, suggesting an extremely low reputation. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service.

VirusTotal analysis shows that three of ninety‑five scanning engines flagged the domain, confirming the presence of malicious indicators. The reported scam type is a crypto scam that impersonates the SushiSwap brand, aligning with the “brand impersonation” classification. The current operational status is listed as offline, which may indicate that the malicious infrastructure has been taken down or is temporarily unavailable. Evidence is limited to the infrastructure observations; the actual content of the site, including any credential‑harvesting forms or malicious payloads, has not been captured. Consequently, defenders cannot confirm the exact phishing vector or payload delivery method.

Monitoring for re‑appearance of the domain or related sub‑domains is advisable, as threat actors frequently re‑register similar names after takedown. Defensive actions should include adding the domain to block lists, enforcing DNS‑level denial for the host, and configuring web gateways to drop traffic to the associated IP range. Continuous review of Cloudflare‑owned ASN 13335 traffic for anomalous patterns can further aid detection.