glencas[.]com

Analysis of the domain glencas.com shows that it was registered on September 18 2025 through Web Commerce Communications Limited and is currently taken offline. DNS resolution points to the IPv6 address 2606:4700:3032::ac43:860d, which belongs to Cloudflare’s network (AS13335) located in the United States. Both authoritative name servers are bill.ns.cloudflare.com and hera.ns.cloudflare.com, confirming that the domain leveraged Cloudflare’s CDN and DNS services. The site presented the page title “Glencas: Most Popular Online Crypto Casino Based on Blockchain,” indicating a focus on cryptocurrency gambling.

Threat intelligence flags the site as employing the Gambler Scam phishing kit, and the scam type is classified as a Crypto Scam. A lack of an SSL certificate further weakens the site’s credibility and suggests deliberate avoidance of transport‑layer security. The Gridinsoft trust score is recorded as 0 / 100, and the domain appears on a single security blocklist. PhishDestroy has already blocked the domain, and VirusTotal reports that one of ninety‑five scanning engines flagged it as malicious.

The combination of a zero trust score, absence of encryption, and attribution to a known gambling‑focused phishing kit points to a purposeful attempt to harvest credentials or financial information from users seeking crypto casino services. Because the site is offline, content cannot be examined directly, leaving open the question of which specific victim data may have been collected before takedown. Defenders should continue to block the IPv6 address and the two Cloudflare name servers for glencas.com, add the domain to internal URL filtering lists, and monitor for any future re‑registration or use of the same IP range in phishing campaigns. Ongoing observation of related Cloudflare‑hosted infrastructure is advisable, as attackers often recycle IP space after takedown.