bmt-sushi[.]lat

On July 22, 2026, the domain bmt-sushi.lat was identified as part of a brand impersonation campaign targeting SushiSwap, a decentralized finance (DeFi) platform. The domain was created on February 21, 2026, and has since been taken offline. Infrastructure analysis reveals that the domain resolved to the IP address 104.21.112.1, which is associated with Cloudflare, Inc. and located in California.

Despite the domain being offline, it appears on four security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. This indicates that the domain was previously used in malicious activities and has been flagged by multiple security vendors. One of 93 security vendors on VirusTotal flagged the domain, suggesting a low but notable level of suspicion.

The exact content of the domain has not been analyzed, but the context and blocklist presence strongly suggest it was involved in a crypto scam impersonating SushiSwap. Defenders should ensure that this domain remains on their blocklists and monitor for any reactivation or similar domains that may be used in future campaigns. Additionally, users should be educated to verify the authenticity of SushiSwap-related websites and to be wary of any unsolicited links or communications.