kaicenat[.]top

PhishDestroy identifies the domain kaicenat.top as an active generic phishing host impersonating the Kaicenat crypto-casino brand with a drainer kit designed to harvest blockchain wallets and credentials. The page promotes itself as Kaicenat: Most Popular Online Crypto Casino Based on Blockchain, clearly mirroring the legitimate Kaicenat branding to lure victims into connecting fraudulent wallet addresses. Threat actors are rotating infrastructure quickly; current detection coverage on VirusTotal sits at 7 out of 95 engines, indicating the page remains under the radar for most scanning tools.

Technical indicators for kaicenat.top show a Let’s Encrypt-issued SSL certificate validating the domain over IPv4 address 104.21.20.183. Domain registration details remain obscured via privacy protection, but passive DNS history points to a recent creation window. Google Safe Browsing currently lists the domain with no malicious flag, and the domain has accumulated zero detections on publicly available threat-intelligence blocklists. Despite these low scores, the drainer-kit fingerprint matches active campaigns tracked under seed 5188c4, suggesting imminent takedown resistance.

Current operational status shows the phishing infrastructure is still live and serving the fake casino interface. Rapid response measures—such as DNS sinkholing and browser-blocklist ingestion—have not yet succeeded in neutralizing the domain. While the immediate risk to users connecting wallets is high, the lack of detection engines and blocklist entries indicates a window of opportunity for attackers. Security teams are advised to block the IP 104.21.20.183 and flag the domain kaicenat.top at the network perimeter to prevent further wallet-draining incidents.