mbeastplay[.]cc

The domain mbeastplay.cc was registered on October 27, 2025 through NiceNIC International Group Co., Limited and currently resolves to the Cloudflare IP address 172.67.206.250, which is advertised as belonging to AS13335 in the United States. The site is hosted behind Cloudflare and does not present an SSL certificate, leaving the connection unencrypted. Nameservers gina.ns.cloudflare.com and sid.ns.cloudflare.com confirm the use of Cloudflare’s DNS infrastructure. The page title retrieved from the live site reads "Mbeastplay: Most Popular Online Crypto Casino Based on Blockchain," indicating the operator is positioning the domain as a cryptocurrency gambling service.

Intelligence flags the domain as a crypto‑related scam and associates it with the Gambler Scam phishing kit. Twelve of the ninety‑five security vendors on VirusTotal flagged the domain as malicious, and the domain appears on at least one external security blocklist. PhishDestroy has already taken the domain offline, and Gridinsoft assigns it a trust score of 0 out of 100, reinforcing the malicious assessment. Evidence suggests the domain is being used to lure victims into a fake crypto casino environment, potentially to harvest credentials or solicit funds.

What remains unknown includes the exact payload delivered to victims, the presence of any command‑and‑control infrastructure, and whether the domain has been used in broader campaigns targeting specific cryptocurrency platforms. Defenders should block the domain at the DNS and network layers, monitor for outbound connections to the associated Cloudflare IP, and flag any authentication attempts referencing the "Mbeastplay" brand as suspicious. Continuous re‑validation of the domain’s status is advised, given that the current offline state may change if the operators reactivate the site.