xkcas[.]com

The domain xkcas.com is a confirmed phishing site engaged in brand impersonation targeting Ethereum users. It presents itself as a cryptocurrency platform but is designed to deceive victims into disclosing wallet credentials or transferring funds under false pretenses. No drainer kit was identified, but the site operates as a cryptocurrency scam. As of the latest verification, xkcas.com has been taken offline.

Technical indicators confirm the malicious nature of xkcas.com. The domain is flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and SOCRadar, with a Gridinsoft trust score of 0/100. It appears on 1 security blocklist (PhishDestroy) but is not flagged by Google Safe Browsing. Registered through NameCheap, Inc. on July 30, 2025, the domain resolves to the IP address 57.129.97.29, hosted on AS16276 OVH SAS in Germany. The SSL certificate is issued by XUI.one, and the observed page title is 'XKCAS | Enter the world of sport and stakes!'. Nameservers are uma.ns.cloudflare.com and viddy.ns.cloudflare.com.

Individuals who interacted with xkcas.com should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Monitor transaction history for unauthorized activity and report the incident to relevant platforms, such as Ethereum scam databases or local cybercrime units. If credentials were entered, change passwords on all associated accounts and enable two-factor authentication. Reporting the domain to services like PhishTank or Google Safe Browsing can help prevent further victimization.