kayabasltd[.]com

The domain kayabasltd.com is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency sector. It was designed to mimic the legitimate brand 'across' and operated as a cryptocurrency scam, though no specific drainer kit was identified. As of the latest verification, kayabasltd.com has been taken offline, reducing immediate risk to users.

Technical indicators reveal limited but notable detection: 1 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing did not issue any warnings. The domain appears on one security blocklist (PhishDestroy) and was registered through Cosmotown, Inc. on February 21, 2026. It resolved to the IP address 163.61.188.5, hosted under AS153568 (NEW DHAKA HARDWARE) in the US, and used an SSL certificate issued by Let's Encrypt (R12). The observed page title was 'KAYABAS LIMITED, EXPORTATIONS OF DIGITALS, SCIENCE & TECHNOLOGY | HOME', and the site employed technologies such as PHP, Bootstrap, and jQuery. Gridinsoft assigned it a trust score of 39 out of 100.

Users who interacted with kayabasltd.com should immediately revoke any token approvals granted to the site and transfer remaining funds to a new cryptocurrency wallet. Monitor transaction histories for unauthorized activity and report the domain to relevant platforms, including cryptocurrency exchanges, wallet providers, and anti-phishing organizations such as PhishTank or the Anti-Phishing Working Group. If credentials were entered, change passwords for associated accounts and enable two-factor authentication where available.