playkostar[.]com

Analysis of playkostar.com indicates that the domain was registered on 21 February 2026 and is currently hosted behind Cloudflare’s network (AS13335) with the address 172.67.140.187 located in the United States. The site presents the page title “PLAYKOSTAR | Open the world of luck and rewards!” and was classified by the PhishDestroy blocklist as a generic phishing site. The domain appears on a single security blocklist and has been taken offline at the time of this assessment. VirusTotal records show that the domain was scanned by 93 antivirus and URL‑reputation engines, none of which raised a detection.

The SSL certificate is listed as “WE1”, confirming that HTTPS is available but providing no further insight into certificate authority or validity period. No additional data from Safe Browsing, Open Threat Exchange, or registrar reputation is available, and trust‑score services have not published a rating for this host. The limited evidence suggests that the infrastructure was deliberately positioned to benefit from Cloudflare’s performance and anonymity features, a common pattern for phishing infrastructure.

However, the absence of visible detections and the recent creation date leave uncertainty regarding the current operational status of any malicious payloads that may have been hosted. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any resurgence of activity, and consider adding the address 172.67.140.187 to any existing Cloudflare‑related threat‑intel lists. Ongoing scrutiny of related subdomains and any future TLS certificate changes is recommended to detect potential re‑use of the same hosting resources.