mplx-sushi[.]lat

The domain mplx-sushi.lat was registered on February 21, 2026 and is currently taken offline. Analytical sources indicate that the site was used for brand impersonation targeting SushiSwap, classified as a crypto scam. The page title returned by the HTTP response is "Just a moment...", which aligns with a typical Cloudflare challenge page but provides no further insight into the content served.

Infrastructure analysis shows the domain resolves to the IPv6 address 2606:4700:3030::6815:2001, hosted by Cloudflare, Inc. (AS13335) in the United States. The SSL certificate is identified as WE1, confirming the use of TLS but offering no additional trust indicators. Reputation profiling lists the domain on five independent blocklists—PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura—indicating consensus among security vendors that the domain is malicious.

VirusTotal scans report two of ninety‑three security vendors flagging the domain, reinforcing the presence of threat indicators. Given the elevated risk rating and the confirmed impersonation of SushiSwap, defensive teams should add the domain and its resolved IP address to deny‑list rules, monitor DNS queries for similar Cloudflare‑hosted aliases, and advise users to avoid any unsolicited communications referencing SushiSwap that originate from this URL. Continuous monitoring of related blocklist updates is recommended to capture any re‑activation attempts.