rumcas[.]com

This domain, rumcas.com, is identified as a brand impersonation threat targeting users of cryptocurrency-based gambling platforms. The site falsely presents itself as a legitimate blockchain casino, using the page title 'RUMCAS | Play at the best online casino based on Blockchain' to deceive visitors into engaging with fraudulent services. The primary threat involves credential harvesting, unauthorized fund transfers, and potential malware distribution through fake casino interfaces or downloadable content. Users may be tricked into depositing cryptocurrency under the guise of bonuses or promotions, leading to irreversible financial losses. Analysis of the domain reveals multiple technical indicators supporting its malicious classification. The domain was registered on July 25, 2025, through Web Commerce Communications Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 69.5.189.55 and is flagged by 7 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 1/100. Additionally, rumcas.com appears on one security blocklist and is currently blocked by PhishDestroy. The combination of recent registration, low trust scores, and vendor detections underscores its elevated risk level. Users who have interacted with rumcas.com should take immediate action to mitigate potential damage. Those who entered credentials or personal information should revoke access to any linked accounts, enable multi-factor authentication, and monitor for unauthorized transactions. If cryptocurrency was deposited, report the incident to the relevant blockchain explorer and law enforcement. Devices used to access the site should undergo a full security scan to detect malware or backdoors. Organizations should update their security policies to include this domain in blocklists and educate users on recognizing brand impersonation tactics in the gambling and cryptocurrency sectors.