Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
It contains 10 outgoing records; the latest is dated . The recorded recipient is abuse@identitydigital.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
mbp[.]casino
“Mbp: Most Popular Online Crypto Casino Based on Blockchain”
mbp.casino — 未验证. 品牌冒充:Genericcrypto; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 14/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 92/100. 注册商: Devexpanse.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis of mbp.casino, which was taken offline as of the report date, shows a clear pattern of a crypto‑focused phishing campaign. The site advertised itself as “Mbp: Most Popular Online Crypto Casino Based on Blockchain,” a claim that aligns with the identified Gambler Scam phishing kit and the classification of the operation as a crypto scam. The domain was registered on February 21, 2026 through Devexpanse Ltd d/b/a Regery.com, and it resolves to the IPv6 address 2a06:98c1:3121::3, hosted behind Cloudflare (AS13335) in the United States. TLS is provided by a Let’s Encrypt certificate (E7), and the HTTP response code returned was 666, a non‑standard status often used by malicious actors to obscure legitimate traffic.
VirusTotal scans flagged the domain on 14 of 95 security vendors, indicating moderate consensus among scanners that the host is malicious. Additionally, the domain appears on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its reputation as a phishing source. Nameservers sandra.ns.cloudflare.com and keanu.ns.cloudflare.com further confirm Cloudflare’s involvement in DNS resolution.
While the offline status prevents real‑time content verification, the combination of the page title, kit attribution, registration details, hosting infrastructure, and multiple vendor detections provides sufficient confidence to treat mbp.casino as a high‑risk phishing vector. Defenders should ensure that any outbound connections to the listed IPv6 address are blocked, update URL filtering rules to include the domain and its known aliases, and monitor for any re‑registration attempts or similar domains using the same kit. Continuous monitoring of Cloudflare‑hosted domains and rapid ingestion of blocklist updates will help mitigate exposure to this and related crypto‑casino phishing campaigns.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
滥用举报历史 · 10 stored reports over 166 days · click to expand
-
Report #1 Feb 8, 2026 · 18:31 UTCPhishing Abuse Report: mbp[.]casinosupport@regery.com
-
Report #2 ICANN CC 583h still active Mar 5, 2026 · 01:40 UTCESCALATION #2 (583h active): Phishing - mbp[.]casinoabuse@identitydigital.com compliance@icann.org
-
Report #3 ICANN CC 1697h still active Apr 20, 2026 · 14:45 UTCESCALATION #3 (1697h active): Phishing - mbp[.]casinoabuse@identitydigital.com compliance@icann.org
-
Report #4 ICANN CC 1750h still active Apr 22, 2026 · 20:20 UTCESCALATION #4 (1750h active): Phishing - mbp[.]casinoabuse@identitydigital.com compliance@icann.org
-
Report #5 ICANN CC 1843h still active Apr 26, 2026 · 17:26 UTCESCALATION #5 (1843h active): Phishing - mbp[.]casinoabuse@identitydigital.com compliance@icann.org
-
Report #6 ICANN CC 1892h still active Apr 28, 2026 · 18:18 UTCESCALATION #6 (1892h active): Phishing - mbp[.]casinoabuse@identitydigital.com compliance@icann.org
-
Report #7 ICANN CC 2049h still active May 5, 2026 · 07:20 UTCESCALATION #7 (2049h active): Phishing - mbp[.]casinoabuse@identitydigital.com compliance@icann.org
-
Report #8 ICANN CC 2051h still active May 5, 2026 · 08:34 UTCESCALATION #8 (2051h active): Phishing - mbp[.]casinoabuse@identitydigital.com compliance@icann.org
-
Report #9 ICANN CC 2504h still active May 24, 2026 · 06:27 UTCESCALATION #9 (2504h active): Phishing - mbp[.]casinoabuse@identitydigital.com compliance@icann.org
-
Report #10 ICANN CC 3973h still active Jul 24, 2026 · 13:29 UTCESCALATION #10 (3973h active): Phishing - mbp[.]casinoabuse@identitydigital.com compliance@icann.org
Casino / Gambling License Verification
VirusTotal 分析
存档证据
证据与外部报告
PD-1770575373-mbp.casino Recipient: abuse@identitydigital.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。