pearcas[.]com

pearcas.com was registered on June 26, 2025 through Web Commerce Communications Limited and resolves to the IPv4 address 69.5.189.58, which is announced by AS42624 Global-Data System IT Corporation located in Switzerland. The site currently returns an offline HTTP status and does not present an SSL/TLS certificate, indicating that any traffic would be unencrypted. The page title captured from the live snapshot reads “PEARCAS | Play at the best online casino based on Blockchain,” which aligns with the observed phishing kit labelled “Gambler Scam” and the broader classification of a crypto-related scam. Analysis by VirusTotal shows that five of ninety-five scanned security vendors flagged the domain, providing independent confirmation of malicious intent.

Additional detection sources include PhishDestroy, which has already blocked the domain, and a single public blocklist that lists the host. The Gridinsoft trust score of 1 out of 100 further underscores the low reputation of the infrastructure. AlienVault OTX reports one pulse that references the same domain, adding another community-sourced indicator of compromise. Nameserver configuration points to ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, ns4.nameserverhub.com, a common set of resolvers used by many malicious actors.

While the offline status suggests the campaign may be temporarily dormant, the combination of registrar information, hosting attribution, lack of encryption, low trust score, multiple vendor detections, and the specific Gambler Scam kit indicates a high likelihood that the domain was used to lure victims into a fraudulent blockchain casino offering. Defenders should maintain the domain on deny lists, monitor DNS queries for re-registration or IP reuse, and consider proactive network-level blocks for the associated IP address and its ASN. Continuous threat-intel feeds should be consulted for any resurgence of activity tied to the same registrar or hosting provider.