yaps[.]kaito[.]ai[.]wallet-connect[.]festivaleternajuventud[.]com

The domain yaps.kaito.ai.wallet-connect.festivaleternajuventud.com is a phishing site engaged in brand impersonation targeting the 'across' platform, specifically designed to deceive users through a wallet-connect scam. This site does not employ a known crypto drainer kit but poses an elevated risk by mimicking legitimate services to harvest credentials or sensitive information. As of the latest verification, yaps.kaito.ai.wallet-connect.festivaleternajuventud.com has been taken offline, though prior activity remains a concern for potential victims.

Technical analysis reveals that yaps.kaito.ai.wallet-connect.festivaleternajuventud.com was flagged by 4 of 95 VirusTotal security vendors, including alphaMountain.ai, CyRadar, and Seclookup. The domain appears on 2 security blocklists, PhishDestroy and ScamSniffer, and was created on February 21, 2026. It resolved to the IP address 94.159.113.209, located in Russia under AS216234 (Komskov Vadim Aleksandrovich), with an SSL certificate issued by R11. The observed page title was 'Kaito', and the site returned an HTTP 429 status code. No registrar information is available for this domain.

Users who interacted with yaps.kaito.ai.wallet-connect.festivaleternajuventud.com should immediately change any compromised passwords, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or fraudulent activity. If cryptocurrency wallets were connected, revoke all token approvals and transfer funds to a new wallet to prevent potential theft. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in mitigation efforts.