catcaf[.]icu

PhishDestroy identifies catcaf.icu as a live crypto-drainer portal masquerading as a blockchain-based online casino in order to trick cryptocurrency holders into authorizing malicious smart-contract withdrawals. The domain’s front page claims it is the most popular online crypto casino, but the underlying pages contain hidden JavaScript that silently drains approved wallets once users connect. The site specifically targets users searching for “crypto casinos” and leverages a professionally styled interface with fake bonus offers to lower victim vigilance. This domain was flagged in the PhishDestroy database after technical analysis revealed several red flags. Registrant details list Fewmoretaps OU operating under Trustname.com, a registrar often associated with short-lived fraudulent storefronts. The SSL certificate is issued by Let’s Encrypt, a common choice among malicious actors seeking free TLS coverage to appear legitimate. Domain creation occurred on April 14, 2026, indicating an extremely recent campaign that has already begun propagating across social media and messaging platforms. Current VirusTotal scans show zero detections out of ninety-five engines as of the last update, highlighting the challenge of early-stage detection. The site resolves to Cloudflare IP 172.67.136.8, a hosting range repeatedly abused for quick-turn scam pages. If you visited catcaf.icu, immediately revoke any wallet connections made through the “Connect Wallet” button by visiting your wallet provider’s connection dashboard and removing the site. Transfer any remaining assets to a fresh wallet address and consider moving funds to cold storage until the threat is fully neutralized. Report the domain to your wallet provider and local cybercrime units along with transaction hashes of any suspicious outflows. Avoid re-visiting the site; its current status remains active, meaning the pages and scripts can still execute unauthorized withdrawals.