casacde[.]xyz

This domain, casacde.xyz, operates as a crypto drainer phishing site designed to steal cryptocurrency wallet credentials and drain funds from connected accounts. The site mimics legitimate wallet interfaces, tricking users into entering sensitive information such as private keys or seed phrases. Once compromised, victims risk immediate and irreversible loss of digital assets, as transactions on blockchain networks are irreversible by design. Analysis indicates the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious infrastructure. It resolves to the IP address 188.114.96.3 and is flagged by 3 out of 95 security vendors on VirusTotal. The domain appears on four security blocklists and is blocked by multiple threat intelligence platforms, including MetaMask and ScamSniffer. Technologies detected on the site include AngularJS, HSTS, Cloudflare, and HTTP/3, suggesting an attempt to appear legitimate while masking malicious intent. If you visited casacde.xyz or entered any credentials, immediately disconnect the device from the internet to prevent further data exfiltration. Revoke any wallet permissions granted to the site using a trusted blockchain explorer. Transfer remaining funds to a new, secure wallet with a fresh seed phrase. Scan the device for malware using updated security tools, and monitor connected accounts for unauthorized transactions. Report the incident to relevant blockchain security teams and consider filing a report with local cybercrime authorities. Avoid reusing passwords or seed phrases across platforms to mitigate further risk.