gray-sushi[.]lat

PhishDestroy has identified gray-sushi.lat as a brand impersonation phishing domain targeting SushiSwap, a decentralized exchange platform. This domain was created to deceive users into believing they are interacting with legitimate SushiSwap services, potentially leading to credential theft or cryptocurrency loss. The domain's elevated risk level and offline status indicate a significant but contained threat.

Technical analysis reveals that gray-sushi.lat has a VirusTotal detection rate of 1 out of 95 security vendors, meaning only one vendor flagged it as malicious. It was registered through NameCheap, Inc. and resolves to the IP address 2606:4700:3030::6815:4001. The domain was created on August 18, 2025, and its SSL certificate is issued by Google Trust Services / WE1. While the domain is currently offline, it appears on 4 security blocklists, indicating that it has been widely recognized as a threat.

The domain has been taken offline, but users should remain vigilant. PhishDestroy recommends that anyone who may have interacted with gray-sushi.lat avoid entering any personal or financial information and change any credentials that may have been compromised. Users should always verify the authenticity of websites by checking official URLs and using security tools to block known phishing domains. Continued monitoring is advised as similar threats may reappear under different domains.