mblcas[.]com

The domain mblcas.com is a phishing site engaged in brand impersonation targeting the 'blast' platform. It presents itself as a legitimate sports and betting portal but is designed to deceive users into disclosing sensitive information or credentials. No crypto drainer kit was identified in this campaign. The site is currently taken offline, reducing immediate risk, though prior visitors may remain exposed to follow-on fraud.

Technical indicators confirm mblcas.com as a low-visibility but active threat. Only 1 of 95 VirusTotal security vendors flagged the domain, and Google Safe Browsing did not detect it. The domain appears on a single security blocklist, PhishDestroy. Registered through Web Commerce Communications Limited on May 10, 2025, mblcas.com resolves to the IP address 57.129.97.29, hosted on OVH SAS infrastructure in Germany. The SSL certificate is issued by XUI.one, and the observed page title reads 'MBLCAS | Enter the world of sport and stakes!'. Nameservers are limited to one, a common trait in disposable phishing infrastructure.

Users who interacted with mblcas.com should immediately change any passwords entered on the site, particularly if reused across other services. Enable two-factor authentication on all accounts linked to the impersonated brand. Monitor financial and login activity for unauthorized access or transactions. Report the domain to local cybersecurity authorities, the impersonated brand's fraud team, and platforms like Google Safe Browsing or PhishTank to aid in broader takedown efforts.