pinkcas[.]com

Analysis indicates that pinkcas.com was registered on 14 August 2025 through Web Commerce Communications Limited and is hosted on Cloudflare infrastructure (AS13335) with IP 188.114.97.3 located in the United States. The domain resolves to the same IP used by many legitimate services, but the lack of an SSL certificate and a Gridinsoft trust score of 0/100 suggest malicious intent. The page title returned from the site reads “PINKCAS | Play at the best online casino based on Blockchain,” aligning with the reported scam type of a crypto‑focused casino scam.

VirusTotal records show that three of ninety‑five scanning engines flagged the domain, and the site is listed on a single security blocklist and has been actively blocked by PhishDestroy. The infrastructure uses Cloudflare nameservers alec.ns.cloudflare.com and aron.ns.cloudflare.com. The site is currently taken offline, which limits immediate exposure but does not remove the threat of future re‑activation or reuse of the same infrastructure.

Defenders should add pinkcas.com to URL filtering and domain‑blocking policies, monitor the associated IP address for any new activity, and consider flagging the Cloudflare nameservers in threat‑intel feeds. Because the domain leverages a widely used CDN, broader network‑level blocks are not advisable; instead, focus on domain‑level controls and continuous feed updates. Analysts should also watch for other newly registered domains using the same registrar and similar naming patterns that may employ the Gambler Scam kit.