777cas[.]shop

777cas.shop is no longer active, but it was previously identified as a gambling scam domain. This domain was flagged by 4 out of 91 vendors on VirusTotal, indicating a moderate level of detection across security platforms. PhishDestroy added it to its blocklist on the same day it was first detected, June 12, 2026.

The domain's page title, "777cas.shop | 523: Origin is unreachable," suggests it was designed to mimic legitimate gambling sites, possibly to harvest user credentials or financial information. The domain was registered with an unlisted registrar and hosted on IP address 104.21.41.184, with SSL certification issued by Google Trust Services / WE1. Despite its current offline status, its initial presence posed a significant threat, as reflected by a platform risk score of 86 out of 100.

The relatively low number of VirusTotal detections highlights the importance of early threat identification. Phishing domains like 777cas.shop exploit the time lag between domain registration and widespread detection by antivirus databases, which can take 24-72 hours to propagate. PhishDestroy's proactive monitoring captures such threats in this critical window, allowing for swift action before they become widely recognized. This case underscores the need for continuous vigilance against emerging phishing threats.