beastplay[.]com

The domain beastplay.com was registered on February 21, 2026 and is currently active, returning HTTP 200 responses. DNS resolution points to the IP address 23.222.81.16, which belongs to AS16625 Akamai Technologies in Germany. The site is served over TLS using a GoDaddy.com, Inc. certificate issued by the Go Daddy Secure Certificate Authority G2, and HSTS is enforced. Infrastructure fingerprints identify a Node.js application stack behind Envoy and Express, with traffic delivered via Akamai. The domain appears on a single security blocklist and is specifically blocked by PhishDestroy, indicating that it has been recognized as a malicious phishing resource. A Gridinsoft trust score of 0 out of 100 further corroborates its malicious reputation. VirusTotal analysis shows that one of ninety‑three scanning engines flagged the domain, providing additional independent confirmation of risk. Technical records list the authoritative nameservers ns3.afternic.com and ns4.afternic.com; MX records are empty, suggesting no legitimate mail services. No publicly available content analysis is provided, so the exact phishing payload or targeted brand remains unknown. defenders should add beastplay.com to deny‑list rules, monitor for any related C2 connections, and consider issuing sink‑hole redirects to protect users. Continuous observation of the IP address and associated Akamai edge nodes is advised, as the infrastructure could be leveraged for further campaigns.