form-sushi[.]lat

The domain form-sushi.lat is a phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It poses an elevated risk as a cryptocurrency scam designed to deceive users into disclosing sensitive information or transferring funds under false pretenses. No drainer kit was identified, and the site is currently taken offline.

Technical indicators confirm form-sushi.lat as malicious. As of analysis, 1 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing did not detect it. The domain appears on 4 security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. It was created on 2026-02-21 and resolves to the IP address 104.21.112.1, hosted on Cloudflare's infrastructure in the US. The SSL certificate is issued by WE1, and the observed page title was 'Just a moment...'.

Users who interacted with form-sushi.lat should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Enable two-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions. Report the domain to SushiSwap's official security channels and submit it to platforms like PhishTank or Google Safe Browsing to prevent further abuse.