gcas[.]bet
“Gcas: Most Popular Online Crypto Casino Based on Blockchain”
Riepilogo delle prove
Analysis of gcas.bet indicates that the domain was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The site resolves to 104.21.33.155, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The TLS certificate presented is issued by Google Trust Services under the WE1 root, showing that the attacker leveraged a valid SSL certificate to mask malicious activity. The page title returned from the server reads “Gcas: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the listed scam type of a crypto‑focused gambling scheme. Automated scanners on VirusTotal recorded nine positive detections out of ninety‑three antivirus engines, confirming that multiple security products have identified the domain as malicious. The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy feed, indicating that at least one community‑driven blacklist is tracking it.
The hosting environment uses Cloudflare’s DNS service, with nameservers serena.ns.cloudflare.com and nico.ns.cloudflare.com. The infrastructure is tied to a known “Gambler Scam” phishing kit, reinforcing the conclusion that the site was used to lure victims into a cryptocurrency casino fraud. As of the reporting date, the site is offline, but the underlying domain and its associated IP remain under the control of the threat actor and could be reactivated. Defenders should prioritize adding 104.21.33.155 to deny‑list rules where feasible, particularly for inbound traffic to corporate networks. Monitoring for DNS queries to serena.ns.cloudflare.com and nico.ns.cloudflare.com that resolve to the same IP can help detect future re‑use.
Security appliances that reference the PhishDestroy feed or VirusTotal detection scores should flag any access attempts to gcas.bet. Because the SSL certificate is legitimate, certificate pinning will not be effective; instead, focus on URL reputation and content‑based detection.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-1772506242-gcas.bet- Artefatto PDF
- Prova in PDF
Cronologia delle segnalazioni 3
- Segnalazione 1 Phishing Abuse Report: gcas[.]bet
- Segnalazione 2 ⚠️ ESCALATION #2 (36h active): Phishing - gcas[.]bet
- Segnalazione 3 ⚠️ ESCALATION #3 (79h active): Phishing - gcas[.]bet
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 13/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Stato del dominio
Raggiungibile → Non raggiungibile
-
Stato del dominio
Raggiungibile → Non raggiungibile
-
Stato del dominio
Raggiungibile → Non raggiungibile
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo