mestcas[.]com

Analysis indicates that the domain mestcas.com was registered on June 10 2025 via GMO Internet, Inc. The authoritative name servers are ns1.nameserverhub.com and ns2.nameserverhub.com. DNS resolution points to IP address 69.5.189.57, which is allocated to AS42624 Global-Data System IT Corporation and geolocated to Switzerland. The web server presents an Nginx/OpenResty stack and serves a TLS certificate issued by Go Daddy Secure Certificate Authority – G2, provided by GoDaddy.com, Inc. An HTTP request returns a 403 status code, and the page title reported by crawlers is “MESTCAS | Play at the best online casino based on Blockchain,” matching the known scam type of cryptocurrency‑based gambling. The infrastructure has been tagged by PhishDestroy and appears on one public blocklist. VirusTotal analysis shows a single positive detection out of 95 scanners, and the site is associated with the publicly‑known Gambler Scam phishing kit. The current risk rating is high and the domain remains active. Defenders should block DNS resolution to 69.5.189.57, add the domain to URL filtering lists, and monitor for any related command‑and‑control traffic or credential harvesting attempts. Because the site returns a 403 response, further content inspection is limited, and additional investigation may be required to confirm the full payload delivered to victims.