ishowcas[.]com

Analysis of the domain ishowcas.com, created on May 04, 2025 and registered through GMO Internet, Inc., shows a clear pattern of malicious activity targeting cryptocurrency users. The site’s page title, "ISHOWCAS | Play at the best online casino based on Blockchain," aligns with the identified scam type of a crypto scam leveraging a Gambler Scam phishing kit. Infrastructure data indicates the domain resolves to IP address 69.5.189.58, which is assigned to AS42624 Global-Data System IT Corporation and located in Switzerland (CH). The server is identified as Nginx with OpenResty, and the SSL certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2, suggesting the use of a legitimate‑looking HTTPS certificate to increase credibility.

Reputation metrics are extremely low, with Gridinsoft assigning a trust score of 1 out of 100, and the domain is currently listed on one security blocklist and has been blocked by PhishDestroy. VirusTotal analysis records two detections out of ninety‑five scanning vendors, providing additional confirmation of malicious intent. Nameservers listed (ns1‑ns4.nameserverhub.com) are typical of newly provisioned hosting and do not appear to be associated with reputable services. The domain’s status is offline, but the presence of the malicious infrastructure remains a risk if the site is reactivated.

Defenders should immediately block the domain and its resolved IP address at perimeter defenses, update URL filtering and threat intelligence feeds with the observed indicators, and monitor for re‑use of the same IP range or similar phishing kit signatures. Further investigation is needed to capture any live content or user interaction patterns, as the current evidence is limited to infrastructure and registration data. Continuous vigilance is recommended given the low trust score and the use of a reputable SSL certificate to evade naive detection.