playday[.]bet

Analysis of playday.bet, created on 21 February 2026, shows infrastructure consistent with a brand‑impersonation operation targeting the Blast brand. The domain resolves to IP 57.129.97.29, hosted in Germany under ASN 16276 (OVH SAS). An SSL certificate rated E5 is present, indicating weak encryption. Reputation services assign extremely low trust scores: Scamadviser 5 / 100 and Gridinsoft 0 / 100. The site appears on a single security blocklist and has been explicitly blocked by PhishDestroy.

VirusTotal reports that 2 of 93 scanning engines flag the domain, confirming malicious characteristics. The HTTP response is currently offline, but the page title captured prior to takedown reads “PLAYDAY | Enter the world of sport and stakes!”, which aligns with a gambling‑themed lure. The brand target is identified as “blast”, and the domain is listed as impersonating that brand. No additional indicators such as OTX tags or Safe Browsing entries were provided.

Defenders should enforce DNS‑level denial for playday.bet, incorporate the IP address 57.129.97.29 into network blocklists, and monitor for any outbound connections to the host. SSL inspection should be enabled to detect the low‑grade certificate. Given the low trust scores and blocklist presence, the domain should be considered hostile and excluded from user‑accessible resources. Continuous monitoring of OVH‑hosted assets for similar patterns is recommended.