bombieplay[.]com

bombieplay.com is active as of 12 July 2026 and is classified as a generic phishing site with a high risk rating. The domain was created on 21 February 2026 and currently returns HTTP 403 responses. The page title observed during inspection is "BOMBIEPLAY | Open the world of luck and rewards!" indicating an attempt to lure victims with gambling‑style incentives.

Registration data shows the domain was obtained through MAT BAO CORPORATION and uses Cloudflare’s authoritative nameservers brady.ns.cloudflare.com and meiling.ns.cloudflare.com. DNS resolution points to 172.67.180.195, an address advertised by AS13335 Cloudflare, Inc., located in the United States. The TLS certificate is issued by Google Trust Services under the WE1 platform, providing a valid HTTPS endpoint but offering no indication of malicious intent.

Threat intelligence confirms that bombieplay.com appears on a single security blocklist and is actively blocked by PhishDestroy. The site’s Gridinsoft trust score is 1 out of 100, and VirusTotal reports five out of ninety‑five security vendors flagging the domain as malicious, reflecting a modest but notable detection footprint. These indicators collectively suggest that the domain is being monitored by multiple scanning services.

While the observable data confirms the presence of phishing‑related infrastructure, the limited number of blocklist entries and relatively low vendor detection count leave some uncertainty regarding the scale of victim outreach. Defenders should prioritize immediate containment by adding bombieplay.com to URL filtering and DNS sinkhole rules, enforce TLS inspection to capture malicious payloads, and monitor Cloudflare‑origin traffic for any anomalous patterns. Ongoing observation of the registrar and name‑server configuration is advised to detect potential re‑hosting or credential changes.