takecas[.]com

The domain takecas.com has been identified as a malicious phishing resource and was taken offline by security vendors as of July 24, 2026. The site presented the page title "TAKECAS | Open the world of luck and rewards!" suggesting a lure based on promises of luck and rewards. Registration data shows the domain was created on July 22, 2025 and was registered through Web Commerce Communications Limited dba WebNic.cc. DNS resolution points to the IP address 188.114.97.3, which is part of the Cloudflare network (AS13335) and geolocates to the United States.

Infrastructure analysis reveals a Gridinsoft trust score of 0 out of 100, indicating a highly untrusted reputation. The site was flagged by PhishDestroy and appears on one additional security blocklist, confirming its inclusion in known malicious lists. TLS inspection shows the domain uses an SSL certificate identified as "WE1," but the certificate does not provide any indication of legitimacy. VirusTotal scans report that two of ninety-three security vendors flagged the domain, providing further corroboration of its malicious nature.

No additional evidence such as payload samples or phishing kit identifiers is available at this time. Defenders should continue to block takecas.com at DNS and network layers, add it to internal blocklists, and monitor for any re‑hosting attempts that may arise from the underlying Cloudflare infrastructure. Continued observation of the IP address 188.114.97.3 for new activity is advisable, as threat actors often recycle cloud‑based endpoints. Organizations employing safe‑browsing or URL filtering solutions should ensure the domain is listed as unsafe to prevent user exposure.