kalshi[.]com[.]in

This domain, kalshi.com.in, is identified as a generic phishing site targeting cryptocurrency users. Analysis indicates no direct brand impersonation or known drainer kit association, but the infrastructure aligns with fraudulent crypto exchange schemes. The domain was likely intended to mimic legitimate trading platforms to harvest credentials or distribute malicious payloads, though no active payload was observed prior to takedown.

Technical indicators reveal a VirusTotal detection score of 5/95 security vendors, with the domain appearing on 4 security blocklists. It was registered through NETIM SARL on May 18, 2026, resolving to IP address 172.67.135.2. The SSL certificate was issued by Let's Encrypt, and the domain was hosted behind Cloudflare, utilizing HTTP/3 and Cloudflare Browser Insights. No Google Safe Browsing (GSB) entries were recorded, but the domain was proactively blocked by multiple threat intelligence feeds.

As of the latest assessment, kalshi.com.in has been taken offline, likely due to enforcement actions or registrar intervention. While the immediate threat is mitigated, residual risk remains for users who may have interacted with the domain prior to its removal. Organizations are advised to monitor for related indicators of compromise, including the resolved IP and registrar details, and update blocklists to prevent future access attempts. Users should verify domain authenticity before engaging with crypto-related platforms and report suspicious activity to relevant security teams.