playagen[.]my[.]id

playagen.my.id is currently flagged by multiple security services as a phishing‑related site. The domain resolves to the Cloudflare edge address 172.67.185.244, which is associated with AS13335 Cloudflare, Inc. and located in the United States. Registration information shows the domain is hosted on Cloudflare’s infrastructure, using the nameservers christina.ns.cloudflare.com and justin.ns.cloudflare.com, and no SSL certificate is presented, indicating an unencrypted HTTP service at the time of analysis. The site has been listed on at least one public blocklist and is actively blocked by the PhishDestroy service.

AlienVault OTX references the domain in fifteen distinct threat‑intelligence pulses, suggesting repeated observations across different feeds. On VirusTotal, nineteen of ninety‑five scanners returned a malicious classification, reinforcing the suspicion of malicious intent. Gridinsoft assigns a trust score of zero out of one hundred, the lowest possible rating, reflecting extreme distrust. The domain’s current status is reported as taken offline, which may indicate that the malicious content has been removed or the operator has ceased activity, but the underlying infrastructure remains observable.

Because the domain lacks a valid TLS certificate and is hosted on a shared CDN, attribution to a specific campaign or actor is limited. Defenders should continue to block the domain at the DNS and proxy layers, monitor for any re‑appearance of the host IP or associated Cloudflare nameservers, and consider adding the domain to internal blocklists. Ongoing vigilance is advised, especially since the domain has already appeared in multiple threat‑intel sources and continues to be flagged by a substantial portion of antivirus engines.