wovcas[.]com

Analysis as of July 23, 2026 indicates that the domain wovcas.com is currently offline but exhibits multiple indicators of malicious activity consistent with a crypto‑focused phishing operation. The domain was registered on 11 November 2025 through NiceNIC International Group Co., Limited and points to the Cloudflare edge IP 188.114.97.3, which is associated with ASN 13335 (Cloudflare, Inc.) and located in the United States. The site’s page title, retrieved before takedown, reads "Wovcas: Most Popular Online Crypto Casino Based on Blockchain," matching the declared scam type of a crypto scam. No TLS certificate was observed, meaning the site served content over plain HTTP, which is atypical for legitimate financial services and facilitates credential interception. Static analysis reveals the use of the publicly available "Gambler Scam" phishing kit, a framework commonly employed to harvest cryptocurrency credentials and redirect victims to fraudulent gambling platforms.

Reputation services assign the domain a Gridinsoft trust score of 1 out of 100, reflecting an extremely low confidence in its legitimacy. VirusTotal submitted the URL to 95 scanning engines, of which 15 returned positive detections, and the domain appears on at least one security blocklist. PhishDestroy has also listed wovcas.com as blocked, confirming that at least one commercial phishing mitigation service is actively filtering the host. The presence of Cloudflare nameservers (adel.ns.cloudflare.com, hal.ns.cloudflare.com) does not mitigate the risk, as the underlying content remains malicious.

While the site is presently taken offline, the infrastructure—particularly the underlying IP address and the shared Cloudflare edge—may be reused for future campaigns. Defenders should therefore continue to block the domain at the DNS and proxy layers, monitor traffic to the resolved IP address for any resurgence, and consider adding the host to internal blacklists.