vekcas[.]com

vekcas.com was observed hosting a page titled “VEKCAS | Play at the best online casino based on Blockchain”. The page title and the presence of the Gambler Scam kit indicate the site was used to lure victims into a crypto‑focused gambling scam. The domain was registered on August 05 2025 through NameSilo, LLC and resolves to IP 172.67.222.250, which belongs to Cloudflare (AS13335) and is located in the United States. DNS resolution is served by the Cloudflare authoritative nameservers dell.ns.cloudflare.com and javon.ns.cloudflare.com. No TLS certificate was presented, meaning the site operated over plain HTTP at the time of observation.

Detection evidence shows the domain appears on one security blocklist and has been blocked by PhishDestroy. VirusTotal recorded five detections out of ninety‑five scanners, reinforcing the malicious classification. AlienVault OTX lists the domain in a single threat‑intelligence pulse, and Gridinsoft assigns a trust score of 1 / 100. The site is currently offline, and the hosting provider has taken it down.

The available data confirms that vekcas.com was a crypto‑scam phishing vector employing a known gambling kit. However, the exact lure content, credential‑stealing mechanisms, and victim impact remain unknown because the site is no longer reachable and no forensic capture of the page has been published. Defenders should continue to block the domain and the associated IP address at perimeter filters, update URL‑filtering and DNS‑sinkhole rules, and monitor for any future registration of similar domains that use the same kit or brand‑related keywords. Incident response teams should also check internal logs for any outbound connections to 172.67.222.250 during the active window and consider user education campaigns that highlight the “blockchain casino” narrative as a common lure in crypto‑related phishing campaigns.