0x0[.]sushi-cn[.]biz

The domain 0x0.sushi-cn.biz was registered on October 31, 2025 through Dynadot LLC and is presently taken offline, as indicated by the current status flag. Infrastructure analysis shows that the domain resolves to IP address 142.251.40.164, which belongs to AS15169 Google LLC and is geolocated in the United States. The authoritative nameservers apollo.ns.cloudflare.com and meera.ns.cloudflare.com point to Cloudflare DNS services, a common choice for fast‑flux or disposable abuse, though the hosting provider for the resolved IP is Google. No SSL certificate is presented for the domain, meaning traffic would be delivered over plain HTTP if the site were active.

The page title returned from the host is "Google," offering no direct evidence of brand impersonation on the landing page itself; however, the domain is explicitly listed as impersonating SushiSwap, and the scam type is classified as a crypto scam, indicating intent to target users of the SushiSwap platform. Reputation services provide extremely low trust scores: Scamadviser rates the site at 1 out of 100 and Gridinsoft at 0 out of 100, reflecting a high likelihood of malicious intent. VirusTotal analysis records five detections out of ninety‑five scanning engines, confirming that multiple security vendors have identified the domain as malicious. The domain also appears on a single security blocklist and has been flagged by PhishDestroy, demonstrating that at least one dedicated anti‑phishing service has taken action against it.

Given the combination of a recent registration, lack of TLS, low trust scores, multiple vendor detections, and explicit brand impersonation, the risk posture is elevated. Defenders should ensure that network perimeter controls block DNS resolution and HTTP requests to 0x0.sushi-cn.biz, add the associated IP 142.251.40.164 to outbound filtering rules where feasible, and monitor for newly registered domains that resolve to the same IP range or use the same Cloudflare nameservers.