wallet[.]kaspenet[.]io

wallet.kaspenet.io is a cryptocurrency phishing domain designed as a crypto drainer, impersonating the Kaspa Wallet service to steal digital assets. The domain has been taken offline, but it posed an elevated risk by tricking users into connecting their wallets and approving malicious transactions. No specific brand or drainer kit has been identified, but its sole purpose was to drain cryptocurrency from victims.

Technical indicators confirm the domain's malicious nature. VirusTotal detected it as malicious by 3 of 95 vendors, including Fortinet, Seclookup, and SOCRadar. It was registered through Ultahost, Inc on November 25, 2025, and resolves to IP address 38.97.40.99, hosted in the US by AS174 Cogent Communications, LLC. The domain appears on 1 security blocklist, PhishDestroy, and its SSL certificate was issued by Let's Encrypt / R13. The page title observed was 'Kaspa Wallet', and Gridinsoft assigned a trust score of 0/100. Google Safe Browsing did not flag the domain, but the combination of low detection rates and blocklist presence indicates a targeted phishing campaign.

Users who interacted with wallet.kaspenet.io should immediately revoke any token approvals granted to the site, as crypto drainers typically require approval to transfer funds. Move all cryptocurrency to a new, secure wallet that has never been connected to this domain. Change passwords for any related accounts and enable two-factor authentication. Monitor for unauthorized transactions and report the incident to the relevant blockchain security team or the Internet Crime Complaint Center (IC3). To report the domain, submit it to PhishDestroy and other blocklists to prevent future victims.