bozcas[.]com

Analysis of the domain bozcas.com indicates it was registered on 7 November 2025 through Dominet (HK) Limited. The domain resolves to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution uses the Cloudflare nameservers devin.ns.cloudflare.com and kinsley.ns.cloudflare.com. No TLS certificate is present, meaning the site was served over plain HTTP when it was active.

The site advertised itself as “Bozcas: Most Popular Online Crypto Casino Based on Blockchain,” a claim consistent with the listed scam type of a crypto‑based gambling fraud. The infrastructure matches a known “Gambler Scam” phishing kit, and 15 of 95 VirusTotal scanners flagged the domain as malicious. Independent reputation services assign extremely low scores: Scamadviser rates it 1/100 and Gridinsoft 0/100. The domain appears on a single security blocklist and is currently blocked by the PhishDestroy sinkhole, confirming that it has been taken offline.

Evidence points to a classic crypto‑casino phishing operation that lures victims with promises of blockchain gaming and attempts to harvest cryptocurrency credentials. However, the content of the live page cannot be verified because the service is offline, and no SSL/TLS negotiation data is available. Defenders should continue to block the IP 188.114.97.3 and the associated Cloudflare nameservers, monitor for any re‑registration of the domain or similar aliases, and update web‑filtering and intrusion‑detection signatures with the observed indicators. Threat‑intel feeds should be refreshed to include the domain’s registration details, hosting ASN, and the “Gambler Scam” kit fingerprint to improve early detection of analogous campaigns.