gcas[.]bet
“Gcas: Most Popular Online Crypto Casino Based on Blockchain”
gcas.bet — Konten tidak tersedia. Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 9/93 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Fortinet); URLQuery 100 det.; PhishDestroy score 95/100. Registrar: PDR.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of gcas.bet indicates that the domain was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The site resolves to 104.21.33.155, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The TLS certificate presented is issued by Google Trust Services under the WE1 root, showing that the attacker leveraged a valid SSL certificate to mask malicious activity. The page title returned from the server reads “Gcas: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the listed scam type of a crypto‑focused gambling scheme. Automated scanners on VirusTotal recorded nine positive detections out of ninety‑three antivirus engines, confirming that multiple security products have identified the domain as malicious. The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy feed, indicating that at least one community‑driven blacklist is tracking it.
The hosting environment uses Cloudflare’s DNS service, with nameservers serena.ns.cloudflare.com and nico.ns.cloudflare.com. The infrastructure is tied to a known “Gambler Scam” phishing kit, reinforcing the conclusion that the site was used to lure victims into a cryptocurrency casino fraud. As of the reporting date, the site is offline, but the underlying domain and its associated IP remain under the control of the threat actor and could be reactivated. Defenders should prioritize adding 104.21.33.155 to deny‑list rules where feasible, particularly for inbound traffic to corporate networks. Monitoring for DNS queries to serena.ns.cloudflare.com and nico.ns.cloudflare.com that resolve to the same IP can help detect future re‑use.
Security appliances that reference the PhishDestroy feed or VirusTotal detection scores should flag any access attempts to gcas.bet. Because the SSL certificate is legitimate, certificate pinning will not be effective; instead, focus on URL reputation and content‑based detection.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Riwayat Laporan Penyalahgunaan · 3 stored reports over 4 days · click to expand
-
Report #1 Mar 3, 2026 · 02:50 UTCPhishing Abuse Report: gcas[.]betabuse-contact@publicdomainregistry.com
-
Report #2 ICANN CC 36h still active Mar 4, 2026 · 15:07 UTCESCALATION #2 (36h active): Phishing - gcas[.]betabuse-contact@publicdomainregistry.com abuse@identitydigital.com compliance@icann.org
-
Report #3 ICANN CC 79h still active Mar 6, 2026 · 10:49 UTCESCALATION #3 (79h active): Phishing - gcas[.]betabuse-contact@publicdomainregistry.com abuse@identitydigital.com compliance@icann.org
Casino / Gambling License Verification
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-1772506242-gcas.bet Recipient: abuse-contact@publicdomainregistry.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive