vekcas[.]com
Analyse phishing et sécurité de vekcas.com
“VEKCAS | Play at the best online casino based on Blockchain”
vekcas.com — Contenu indisponible (HTTP 502). Type d'arnaque : Crypto Scam. Résumé des preuves: VirusTotal 5/95 (ADMINUSLabs, alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet); URLQuery 100 det.; PhishDestroy score 100/100. Bureau d’enregistrement: NameSilo.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
vekcas.com was observed hosting a page titled “VEKCAS | Play at the best online casino based on Blockchain”. The page title and the presence of the Gambler Scam kit indicate the site was used to lure victims into a crypto‑focused gambling scam. The domain was registered on August 05 2025 through NameSilo, LLC and resolves to IP 172.67.222.250, which belongs to Cloudflare (AS13335) and is located in the United States. DNS resolution is served by the Cloudflare authoritative nameservers dell.ns.cloudflare.com and javon.ns.cloudflare.com. No TLS certificate was presented, meaning the site operated over plain HTTP at the time of observation.
Detection evidence shows the domain appears on one security blocklist and has been blocked by PhishDestroy. VirusTotal recorded five detections out of ninety‑five scanners, reinforcing the malicious classification. AlienVault OTX lists the domain in a single threat‑intelligence pulse, and Gridinsoft assigns a trust score of 1 / 100. The site is currently offline, and the hosting provider has taken it down.
The available data confirms that vekcas.com was a crypto‑scam phishing vector employing a known gambling kit. However, the exact lure content, credential‑stealing mechanisms, and victim impact remain unknown because the site is no longer reachable and no forensic capture of the page has been published. Defenders should continue to block the domain and the associated IP address at perimeter filters, update URL‑filtering and DNS‑sinkhole rules, and monitor for any future registration of similar domains that use the same kit or brand‑related keywords. Incident response teams should also check internal logs for any outbound connections to 172.67.222.250 during the active window and consider user education campaigns that highlight the “blockchain casino” narrative as a common lure in crypto‑related phishing campaigns.
Signaux de sécurité
Renseignements sur la sécurité réseau Registrar context
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif