Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@namecheap.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
lbplay555[.]xyz
“LuckyBear Casino - Login and Authentication | Recharge Rewards up to 360%”
lbplay555.xyz — असत्यापित. घोटाले का प्रकार: Credential Phishing. साक्ष्य सारांश: VirusTotal 14/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLQuery 1 det.; PhishDestroy score 94/100. रजिस्ट्रार: Namecheap.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain lbplay555.xyz has been identified as a credential theft phishing site, specifically impersonating LuckyBear Casino to harvest user login credentials. Analysis indicates the infrastructure was designed to mimic legitimate casino authentication portals, leveraging psychological incentives such as "Recharge Rewards up to 360%" to lure victims. The domain is currently offline, though its operational status may change without notice. Infrastructure analysis reveals the domain was registered through Namecheap on January 22, 2026, and resolved to the IP address 45.59.170.99. The site employed a Let's Encrypt SSL certificate, a common tactic to appear legitimate, and utilized technologies including Node.js, React, Nginx, Next.js, reCAPTCHA, Google Tag Manager, and Webpack. Despite its sophisticated setup, the domain was flagged by 0 of 95 VirusTotal vendors, indicating low initial detection rates. It appeared on one security blocklist and received a trust score of 0/100 from Gridinsoft, further corroborating its malicious nature. Given the domain's current offline status, organizations should monitor for reactivation or similar infrastructure. Defenders are advised to block the IP address 45.59.170.99 and domain lbplay555.xyz at the network level. End-users should be educated on recognizing credential theft tactics, particularly those involving fake login portals and unrealistic reward offers. Security teams are encouraged to review logs for connections to the identified IP and domain, as well as to hunt for related indicators of compromise within their environments.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 7 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
JavaScript library for building user interfaces with component-based architecture.
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
React framework for production with hybrid static and server rendering.
Google's bot-challenge service. On phishing sites, used to appear legitimate and filter out automated scanners.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comModule bundler for modern JavaScript applications.
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of lbplay555.xyz · checked Jun 26, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260324-91CEA5 Recipient: abuse@namecheap.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।