wepcas[.]com

The domain wepcas.com was registered on September 23, 2025 through Web Commerce Communications Limited and resolves to the Cloudflare address 172.67.162.146 (AS13335, United States). No TLS certificate is presented, indicating the site operated without HTTPS. The site’s page title reads “Wepcas: Most Popular Online Crypto Casino Based on Blockchain,” matching the reported Gambler Scam phishing kit and suggesting a crypto‑casino impersonation. Infrastructure analysis shows the domain is served by Cloudflare nameservers donovan.ns.cloudflare.com and wally.ns.cloudflare.com.

Reputation checks record a Gridinsoft trust score of 0 / 100 and a presence on one security blocklist. PhishDestroy has already taken the site offline, and the current status is recorded as offline. VirusTotal scans flagged the domain on 2 of 95 security vendors, providing limited but concrete detection evidence. The limited vendor detections, low trust score, and blocklist listing indicate a high likelihood of malicious intent despite the modest detection count.

Uncertainties remain regarding the full payload of the phishing kit and any active command‑and‑control infrastructure, as the site’s content has not been captured in detail. Defenders should update URL filtering rules to block wepcas.com, monitor Cloudflare‑hosted IP ranges for similar activity, and consider adding the domain to internal blacklists. Continuous re‑scanning with multi‑engine services is recommended to capture any future changes, and any inbound connections to the associated IP should be logged and investigated for potential crypto‑casino phishing attempts.