sushi-carv[.]top

The domain sushi-carv.top is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a decentralized cryptocurrency exchange. This scam site mimics the legitimate SushiSwap platform to deceive users into interacting with fraudulent staking or token operations, posing an elevated risk of financial loss. No cryptocurrency drainer kit was identified in this campaign. As of the latest verification, sushi-carv.top has been taken offline.

Technical indicators confirm the malicious nature of sushi-carv.top. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Trustwave and Webroot, while appearing on 1 security blocklist (PhishDestroy). It was registered on February 21, 2026, and resolved to the IP address 107.172.83.150, hosted by AS36352 (HostPapa) in the US. The SSL certificate was issued by R11, and the observed page title was 'Stake SUSHI | Sushi'. Google Safe Browsing did not flag the domain, and the Gridinsoft trust score was 0/100.

Users who interacted with sushi-carv.top should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Enable two-factor authentication (2FA) on all cryptocurrency accounts and monitor for unauthorized transactions. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to assist in broader mitigation efforts.