sushi-caw[.]xyz

The domain sushi-caw.xyz was registered on February 21, 2026 and is currently listed as offline. It resolves to the IP address 107.172.83.150, which is hosted in the United States under autonomous system AS36352 operated by HostPapa. The site presented the page title "Stake SUSHI | Sushi," indicating a focus on the SushiSwap brand, and is classified as a crypto scam in the intelligence feed. The domain has been blocked by the PhishDestroy service and appears on a single security blocklist, reflecting limited but concrete detection activity.

VirusTotal analysis shows that seven of ninety‑three security vendors flagged the domain, providing additional corroboration of malicious intent. The SSL certificate is identified as type R11, confirming the presence of transport‑layer encryption despite the fraudulent purpose. Defenders should treat sushi-caw.xyz as a confirmed impersonation of SushiSwap and incorporate its IP and domain into network‑level deny lists and URL filtering policies.

Continuous monitoring of HostPapa‑hosted IP ranges for newly registered domains with similar naming patterns is advisable, as the infrastructure could be reused for future campaigns. Given the offline status, immediate remediation focuses on preventing user access and ensuring that any residual references in logs or threat‑intel feeds are purged. Organizations should also educate users about unsolicited crypto‑related URLs that reference SushiSwap, reinforcing the need to verify URLs against official sources before interaction.