nxpc-sushi[.]lat

The domain nxpc-sushi.lat is a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform SushiSwap. It poses an elevated risk by mimicking the legitimate SushiSwap interface to deceive victims into disclosing sensitive information or interacting with malicious smart contracts, though no drainer kit was identified. As of the latest verification, nxpc-sushi.lat has been taken offline, but prior activity classified it as a cryptocurrency scam.

Technical indicators confirm the malicious nature of nxpc-sushi.lat. The domain was flagged by 1 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned a trust score of 0 out of 100. It appeared on four security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. The domain was created on February 21, 2026, and resolved to the IPv6 address 2606:4700:3032::ac43:ceda, hosted by Cloudflare in the United States (AS13335). The SSL certificate was issued by WE1, and the observed page title was 'Nur einen Moment…'. No registrar information was available.

Individuals who interacted with nxpc-sushi.lat should take immediate safety steps. If cryptocurrency transactions were initiated, revoke all token approvals using a tool like Etherscan’s token approval checker and transfer funds to a new, secure wallet. For credential exposure, change passwords on all accounts, enable two-factor authentication, and monitor for unauthorized activity. Report the domain to relevant platforms, including Google Safe Browsing, the Anti-Phishing Working Group (APWG), and the impersonated brand’s official security channels to aid in mitigation efforts.