crv[.]sushi-com[.]one

On July 23, 2026, the domain crv.sushi-com.one was assessed as an elevated‑risk crypto‑scam that impersonates the SushiSwap brand. The domain was registered on October 21, 2025 through Dynadot LLC and is delegated to the Cloudflare name servers apollo.ns.cloudflare.com and meera.ns.cloudflare.com. DNS resolution points to the IP address 104.21.78.129, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate is presented, and an HTTP request returns the generic page title “Just a moment…”, indicating that the site does not serve a valid branded interface.

Reputation services assign extremely low trust scores: Scamadviser rates the domain 1/100 and Gridinsoft 0/100. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service. VirusTotal analysis shows that 11 of 95 scanning engines flag the domain as malicious, reinforcing the suspicion of illicit activity. The current operational status is offline, which limits further behavioural observation.

Defenders should treat the domain as hostile: incorporate the domain and its associated IP address into deny lists, monitor for any re‑activation, and ensure that endpoint protection solutions reference the observed detection counts. Continuous verification of Cloudflare‑hosted infrastructure is advisable, as the same IP space is frequently reused by unrelated legitimate services. Until the site is taken permanently offline, the evidence supports a high confidence classification as a crypto‑themed brand‑impersonation scam targeting SushiSwap users.