x-cas[.]com

The domain x-cas.com was a generic phishing site targeting cryptocurrency users. It presented itself as a blockchain-based online casino under the name 'X-CAS' but operated as a scam to deceive victims into depositing funds or revealing sensitive information. No legitimate brand or drainer kit was identified, though the site was explicitly designed to exploit interest in cryptocurrency gambling. As of the latest verification, x-cas.com has been taken offline.

Technical indicators confirm the malicious nature of x-cas.com. The domain was flagged by 3 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and Fortinet. It appeared on 1 security blocklist (PhishDestroy) and had a Gridinsoft trust score of 0/100. Registered through MAT BAO CORPORATION on July 14, 2025, the domain resolved to the IP address 69.5.189.56, hosted on AS42624 (Global-Data System IT Corporation) in Switzerland. No SSL certificate was present, and the observed page title was 'X-CAS | Play at the best online casino based on Blockchain'. Nameservers were ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserver.

Users who interacted with x-cas.com should assume their cryptocurrency wallet or credentials may be compromised. Revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. Enable two-factor authentication on all accounts and monitor for unauthorized transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime authorities to aid in takedown efforts.