fai-sushi[.]lat

fai-sushi.lat, a domain impersonating the popular cryptocurrency platform SushiSwap, has been flagged as malicious by 1 of 93 vendors on VirusTotal. The domain has been taken down and is currently offline. It first appeared on public blocklists from PhishDestroy, Polkadot, Enkrypt, and Codeesura. The site was hosted on IP 104.21.6.11, managed by Cloudflare, Inc., in the United States.

The domain was created on February 21, 2026, and PhishDestroy detected it on February 26, 2026. Despite its short-lived activity, the domain managed to exploit the initial window of opportunity before being flagged by most antivirus databases. This highlights the importance of early detection systems in identifying threats before they propagate widely.

With a platform risk score of 63/100, fai-sushi.lat posed a significant threat to users engaging in cryptocurrency transactions. The site likely aimed to harvest sensitive information by mimicking SushiSwap's interface, a common tactic in cryptocurrency scams. Although the domain is now offline, its brief existence serves as a reminder of the rapid deployment and takedown cycle typical of phishing operations.