su-shi[.]lat

An elevated-risk threat has been identified involving the domain su-shi.lat, which poses a specific threat of brand impersonation targeting users of the Sushi decentralized exchange. The domain was taken offline after being flagged, but its design and title — 'Staking | Sushi' — clearly aimed to deceive visitors into believing they were accessing a legitimate staking platform. This type of scheme often tricks users into connecting their wallets or entering private keys, leading to potential theft of cryptocurrency.

Technical indicators underscore the malicious nature of su-shi.lat. VirusTotal flags it with 4 out of 95 security vendors marking it as malicious, and it appears on 3 separate security blocklists. The domain was registered through Dynadot LLC on February 22, 2026, and resolves to the IP address 188.114.96.3. Notably, it lacks an SSL certificate, which is a red flag for any site requesting sensitive information. These data points collectively highlight a well-structured yet fraudulent effort to impersonate the Sushi brand.

To protect against such brand impersonation attacks, users should always verify domain names carefully, especially for cryptocurrency platforms. Avoid clicking links from unsolicited messages or social media posts. Only access official sites through bookmarks or verified sources. If a site requests wallet connection or private keys, it is almost certainly a scam. Report any suspicious domains to security teams and block them at the network level. PhishDestroy advises immediate caution and recommends using multi-factor authentication and hardware wallets to safeguard assets.