lilcas[.]com

Analysis of the domain lilcas.com indicates it was operating as a fraudulent crypto casino scam, active until recently taken offline. Registered on October 4, 2025, through Dominet (HK) Limited, the domain resolved to 188.114.97.3, an IP address assigned to Cloudflare, Inc. (AS13335) in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (eloise.ns.cloudflare.com and ruben.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. The domain lacked an SSL certificate, increasing the risk of unencrypted data interception for any visitors.

The page title, 'Lilcas: Most Popular Online Crypto Casino Based on Blockchain,' explicitly identifies the scam type as a crypto-focused gambling fraud, though no legitimate brand association is confirmed. Detection data from July 23, 2026, shows 13 of 95 security vendors on VirusTotal flagged the domain, and it appeared on at least one security blocklist. Gridinsoft assigned a trust score of 1/100, further corroborating its malicious classification. The domain was blocked by PhishDestroy, aligning with its identification as part of a 'Gambler Scam' phishing kit.

Defenders should treat lilcas.com as a confirmed malicious domain, particularly in environments where crypto-related scams pose a risk. While the domain is currently offline, historical resolutions to 188.114.97.3 and associated Cloudflare infrastructure may warrant monitoring for re-emergence. No evidence links this domain to a specific legitimate brand, so detection rules should focus on crypto-gambling keywords, Cloudflare-hosted phishing patterns, and the absence of SSL. Additional scrutiny of domains registered through Dominet (HK) Limited with similar naming conventions may uncover related threats.