btt-sushi[.]cfd

The domain btt-sushi.cfd is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform SushiSwap. It was designed to deceive victims through a cryptocurrency scam, though no specific drainer kit was identified. As of the latest verification, btt-sushi.cfd has been taken offline, but users who interacted with it may still be at risk.

Technical analysis shows btt-sushi.cfd was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and Trustwave, with a Gridinsoft trust score of 0/100. The domain appears on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. It was created on February 21, 2026, and resolved to the IP address 104.21.84.131, hosted on Cloudflare's network (AS13335) in the US. The SSL certificate was issued by WE1, and the observed page title was 'Just a moment...'. No registrar information is available.

Users who visited btt-sushi.cfd should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. Enable two-factor authentication (2FA) on all cryptocurrency accounts and monitor for unauthorized transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to assist in broader takedown efforts.