resolv-sushi[.]cfd

The domain resolv-sushi.cfd was registered on 21 February 2026 and is presently listed as offline. DNS resolution points to 172.67.131.42, an address owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The site presented the page title “Nur einen Moment…”, which does not disclose any further content. An SSL certificate labelled “WE1” was observed, indicating the use of a publicly‑trusted certificate.

The domain is classified as a crypto‑scam that impersonates the SushiSwap brand, consistent with its inclusion in the “brand impersonation” threat category. Security‑vendor telemetry shows that two of ninety‑three VirusTotal scanners flagged the domain, and the site appears on four external blocklists. Reputation services have assigned a Gridinsoft trust score of 0 out of 100, reflecting a complete lack of trust. Defensive feeds from PhishDestroy, Polkadot, Enkrypt and Codeesura have all marked the domain as malicious and have blocked it.

The combination of a recent registration, use of a Cloudflare‑hosted IP, low trust score, and multiple blocklist entries supports the conclusion that resolv-sushi.cfd was deployed to lure victims into a SushiSwap‑related cryptocurrency scam. At present, no additional artifacts such as phishing pages, credential‑harvesting forms, or malware payloads have been publicly released, leaving the exact attack vector uncertain. Organizations should continue to block the domain at perimeter defenses, monitor for any future re‑use of the same host or certificate, and educate users about unsolicited requests that reference SushiSwap. Threat‑intel teams may also consider submitting the indicator to additional sandbox services to obtain deeper behavioural data should the site become active again.