rwasushi[.]top

rwasushi.top was registered through NameSilo, LLC on August 23, 2025. The domain resolves to the Cloudflare edge address 188.114.97.3, which is announced as AS13335 Cloudflare, Inc. and geolocated in the United States. No SSL certificate is presented, and the authoritative nameservers are buck.ns.cloudflare.com and emily.ns.cloudflare.com, indicating use of Cloudflare's DNS service. The site is currently reported as offline, and its page title, captured before takedown, reads “Nur einen Moment…”.

Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist, where it has also been flagged by the PhishDestroy remediation service. VirusTotal analysis shows that two of ninety‑five scanned security vendors flagged the domain, providing limited but corroborating evidence of malicious intent. The campaign targets the SushiSwap brand, classifying the activity as a crypto‑related scam that attempts to impersonate the legitimate service. Observed indicators suggest a low‑profile infrastructure relying on Cloudflare’s CDN, which can obscure the true hosting environment.

Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms because the site content has not been publicly archived. Defenders should immediately block DNS resolution to 188.114.97.3, add the domain to URL filtering and threat‑intel feeds, and monitor for any new domains registered by the same registrar that reference SushiSwap. Continuous re‑scanning of the domain on reputation services is advised in case the site is re‑hosted or the content changes.