olas[.]spksushi[.]lat

This domain is flagged for elevated risk due to brand impersonation, specifically targeting SushiSwap, a well-known decentralized finance platform. Analysis indicates the infrastructure is designed to deceive users into believing they are interacting with the legitimate service, potentially facilitating unauthorized transactions or data exposure. The domain exhibits multiple technical indicators consistent with malicious activity, warranting immediate scrutiny. Infrastructure analysis reveals the domain olas.spksushi.lat was registered on June 08, 2026, through NameSilo, LLC, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3, which has been linked to other suspicious activities. The domain is currently blocked by four security blocklists, including MetaMask, PhishDestroy, SEAL, and OISD, and is flagged by 6 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services, which, while legitimate, is often exploited by threat actors to lend false credibility to malicious sites. The page title, 'Google,' further suggests an attempt to mislead users into trusting the domain. Mitigation steps for this brand impersonation threat include immediate verification of the domain’s legitimacy before any interaction. Users should cross-reference the URL with official SushiSwap communication channels and avoid entering sensitive information or connecting wallets. Network-level blocking of the domain and its associated IP (188.114.96.3) is recommended for organizations to prevent access. Additionally, monitoring for similar domains registered through NameSilo or resolving to the same IP can help identify related threats. Security teams should prioritize educating users on recognizing impersonation tactics, such as mismatched SSL certificates or unusual page titles, to reduce the risk of compromise.