# onecas.cc — MALICIOUS

> onecas.cc impersonates Elon Musk’s crypto casino to steal user data. Avoid this high-risk phishing site. Check PhishDestroy before visiting suspicious domains.

## Summary
PhishDestroy identifies onecas.cc as a high-risk generic phishing domain impersonating Elon Musk’s official crypto casino. The domain’s intent is to deceive users into divulging sensitive information.

This domain was flagged by 10 out of 95 VirusTotal security vendors and appears on one security blocklist. Registered on February 21, 2026, it resolves to IP 172.67.161.122 and was registered via NiceNIC International Group Co., Limited.

Currently taken offline, users are advised to avoid interacting with onecas.cc. PhishDestroy recommends verifying domains through trusted sources to prevent credential compromise and financial loss.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Onecas: Elon Musk’s Official Crypto Casino Powered by Blockchain

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.161.122
- Nameservers: ["bailey.ns.cloudflare.com", "johnny.ns.cloudflare.com"]
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 10 vendors flagged
  Vendors: ["alphaMountain.ai", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Gridinsoft", "Kaspersky", "Seclookup", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bb68c-7c06-77c2-865b-74c1daf27bfb.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/45fca6aa-8649-4bb1-9a06-8794b38584c6
- PhishDestroy: https://phishdestroy.io/domain/onecas.cc/
- LLM endpoint: https://phishdestroy.io/domain/onecas.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/onecas.cc/
Last updated: 2026-03-19