weplay[.]co[.]com

This domain, weplay.co.com, is identified as a brand impersonation threat specifically targeting users of crypto casino platforms. The domain mimics legitimate gambling services to deceive visitors into engaging with fraudulent content. As of the latest assessment, the domain has been taken offline, though prior activity remains a concern for historical exposure. Analysis indicates that weplay.co.com was flagged by 2 of 95 security vendors on VirusTotal, reflecting limited but notable detection. The domain was registered through Moniker Online Services LLC on August 16, 1997, though recent malicious activity suggests potential compromise or repurposing of an older domain. It resolves to the IP address 104.21.30.119 and has been added to 5 security blocklists. The Gridinsoft trust score for this domain is 0/100, reinforcing its classification as high-risk. Technologies detected on the site include Bootstrap, Unpkg, Slick, Lightbox, jsDelivr, jQuery, Google Analytics, and cdnjs, which are commonly used in both legitimate and malicious web applications. Infrastructure analysis reveals that the domain was previously active under the page title 'WEPLAY Casino | Malaysia's Top Online Casino,' directly impersonating a crypto gambling brand. The SSL certificate is issued by Google Trust Services, which does not inherently validate the legitimacy of the site's content. Given the domain's current offline status, immediate threats are mitigated; however, organizations and individuals should remain vigilant. Recommended actions include blocking the domain and associated IP (104.21.30.119) at the network level, monitoring for phishing campaigns referencing this domain, and educating users about brand impersonation tactics in the crypto gambling sector.