gcas[.]bet
“Gcas: Most Popular Online Crypto Casino Based on Blockchain”
gcas.bet — 内容不可用. 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 9/93 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Fortinet); URLQuery 100 det.; PhishDestroy score 95/100. 注册商: PDR.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis of gcas.bet indicates that the domain was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The site resolves to 104.21.33.155, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The TLS certificate presented is issued by Google Trust Services under the WE1 root, showing that the attacker leveraged a valid SSL certificate to mask malicious activity. The page title returned from the server reads “Gcas: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the listed scam type of a crypto‑focused gambling scheme. Automated scanners on VirusTotal recorded nine positive detections out of ninety‑three antivirus engines, confirming that multiple security products have identified the domain as malicious. The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy feed, indicating that at least one community‑driven blacklist is tracking it.
The hosting environment uses Cloudflare’s DNS service, with nameservers serena.ns.cloudflare.com and nico.ns.cloudflare.com. The infrastructure is tied to a known “Gambler Scam” phishing kit, reinforcing the conclusion that the site was used to lure victims into a cryptocurrency casino fraud. As of the reporting date, the site is offline, but the underlying domain and its associated IP remain under the control of the threat actor and could be reactivated. Defenders should prioritize adding 104.21.33.155 to deny‑list rules where feasible, particularly for inbound traffic to corporate networks. Monitoring for DNS queries to serena.ns.cloudflare.com and nico.ns.cloudflare.com that resolve to the same IP can help detect future re‑use.
Security appliances that reference the PhishDestroy feed or VirusTotal detection scores should flag any access attempts to gcas.bet. Because the SSL certificate is legitimate, certificate pinning will not be effective; instead, focus on URL reputation and content‑based detection.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
滥用举报历史 · 3 stored reports over 4 days · click to expand
-
Report #1 Mar 3, 2026 · 02:50 UTCPhishing Abuse Report: gcas[.]betabuse-contact@publicdomainregistry.com
-
Report #2 ICANN CC 36h still active Mar 4, 2026 · 15:07 UTCESCALATION #2 (36h active): Phishing - gcas[.]betabuse-contact@publicdomainregistry.com abuse@identitydigital.com compliance@icann.org
-
Report #3 ICANN CC 79h still active Mar 6, 2026 · 10:49 UTCESCALATION #3 (79h active): Phishing - gcas[.]betabuse-contact@publicdomainregistry.com abuse@identitydigital.com compliance@icann.org
Casino / Gambling License Verification
VirusTotal 分析
存档证据
证据与外部报告
PD-1772506242-gcas.bet Recipient: abuse-contact@publicdomainregistry.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。