Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
It contains 12 outgoing records; the latest is dated . The recorded recipient is abuse@inwx.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
kahcas[.]com
kahcas.com 피싱 및 보안 점검
“Kahcas: Most Popular Online Crypto Casino Based on Blockchain”
kahcas.com — 연결 가능 · 액세스가 제한됨 (HTTP 403). 브랜드 사칭: Genericcrypto; 사기 유형: Crypto Scam. 증거 요약: VirusTotal 15/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLQuery 3 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. 등록기관: INWX.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Analysis of kahcas.com indicates a high-risk crypto scam domain targeting users with a fraudulent online casino theme. The domain, registered on October 2, 2025, through INWX GmbH, resolves to IP 104.21.9.158 (Cloudflare, Inc., AS13335) and is currently offline with an HTTP 403 status. The page title, 'Kahcas: Most Popular Online Crypto Casino Based on Blockchain,' suggests an attempt to impersonate a legitimate blockchain-based gambling platform, though no specific brand is confirmed as the target. Security vendors flagging this domain include PhishDestroy, MetaMask, and SEAL, with 14 of 95 vendors on VirusTotal detecting it as malicious.
The domain appears on three security blocklists, and Gridinsoft assigns it a trust score of 0/100. Infrastructure analysis reveals Cloudflare nameservers (garret.ns.cloudflare.com, josephine.ns.cloudflare.com) and a Google Trust Services SSL certificate (WE1), which are common among both legitimate and malicious sites. The identified phishing kit, 'Gambler Scam,' aligns with the domain's purported crypto casino theme.
Defenders should treat this domain as a confirmed threat, block it at the network level, and monitor for related infrastructure (e.g., shared IPs, SSL certificates, or registrant details). While the domain is currently offline, historical DNS and WHOIS data should be preserved for forensic analysis. No evidence suggests this campaign is inactive; defenders should assume it may resurface under similar domains or infrastructure.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | kahcas.com |
phishing | Phishing Block |
| Hagezi Threat Feed | kahcas.com |
malicious | Sinkholed |
| DNS4EU | kahcas.com |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
악용 신고 이력 · 12 stored reports over 158 days · click to expand
-
Report #1 Escalation 330h still active Feb 6, 2026 · 16:28 UTCESCALATION #22 (330h active): Phishing - kahcas[.]comabuse@inwx.com
-
Report #2 Escalation 380h still active Feb 8, 2026 · 18:28 UTCESCALATION #23 (380h active): Phishing - kahcas[.]comabuse@inwx.com
-
Report #3 ICANN CC 529h still active Feb 14, 2026 · 23:02 UTCESCALATION #24 (529h active): Phishing - kahcas[.]comabuse@inwx.com abuse@verisign-grs.com compliance@icann.org
-
Report #4 Escalation Feb 26, 2026 · 18:54 UTCPhishing Abuse Report: kahcas[.]comabuse@inwx.com
-
Report #5 ICANN CC 183h still active Mar 6, 2026 · 10:47 UTCESCALATION #2 (183h active): Phishing - kahcas[.]comabuse@inwx.com abuse@verisign-grs.com compliance@icann.org
-
Report #6 ICANN CC 331h still active Mar 12, 2026 · 13:59 UTCESCALATION #3 (331h active): Phishing - kahcas[.]comabuse@inwx.com abuse@verisign-grs.com compliance@icann.org
-
Report #7 ICANN CC 436h still active Mar 16, 2026 · 23:28 UTCESCALATION #4 (436h active): Phishing - kahcas[.]comabuse@inwx.com abuse@verisign-grs.com compliance@icann.org
-
Report #5 ICANN CC 539h still active Mar 21, 2026 · 09:27 UTCESCALATION #5 (539h active): Phishing - kahcas[.]comabuse@inwx.com abuse@verisign-grs.com compliance@icann.org
-
Report #6 ICANN CC 892h still active Apr 5, 2026 · 02:32 UTCESCALATION #6 (892h active): Phishing - kahcas[.]comabuse@inwx.com abuse@verisign-grs.com compliance@icann.org
-
Report #7 ICANN CC 1467h still active Apr 29, 2026 · 00:56 UTCESCALATION #7 (1467h active): Phishing - kahcas[.]comabuse@inwx.com abuse@verisign-grs.com compliance@icann.org
-
Report #8 ICANN CC 1616h still active May 5, 2026 · 06:23 UTCESCALATION #8 (1616h active): Phishing - kahcas[.]comabuse@inwx.com abuse@verisign-grs.com compliance@icann.org
-
Report #2 ICANN CC 480h still active Jul 14, 2026 · 14:53 UTCESCALATION #2 (480h active): Phishing - kahcas[.]comabuse@inwx.com abuse@verisign-grs.com compliance@icann.org
VirusTotal 분석
보관된 증거
증거 및 외부 보고서
PD-1769193694-kahcas.com Recipient: abuse@inwx.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.