fna-sushi[.]lat

The domain fna-sushi.lat is a phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency exchange platform. It was designed to deceive users into believing they were interacting with the legitimate SushiSwap service, posing an elevated risk of cryptocurrency theft. As of the latest verification, fna-sushi.lat has been taken offline, though it previously operated as a scam site without an associated drainer kit.

Technical indicators confirm the malicious nature of fna-sushi.lat. The domain was flagged by 1 of 95 VirusTotal security vendors, including G-Data, and appeared on 5 security blocklists, including PhishDestroy, ScamSniffer, and Polkadot. Registered through Namecheap on August 17, 2025, it resolved to the IP address 104.21.112.1, hosted by Cloudflare in the US. The SSL certificate was issued by WE1, and the observed page title was 'Nur einen Moment…' with an HTTP 429 status. Gridinsoft assigned it a trust score of 0/100, further indicating its fraudulent intent.

Users who interacted with fna-sushi.lat should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to prevent unauthorized access. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s official security channels to aid in mitigation efforts.