playnos[.]com

Analysis indicates that playnos.com is a confirmed phishing site with a high risk level. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 10, 2025. It currently resolves to the IP address 69.5.189.54, which is located in Switzerland and is part of the AS42624 Global-Data System IT Corporation network. The site has a Gridinsoft trust score of 1/100, indicating a very low level of trust. The domain has been flagged by 5 out of 95 security vendors on VirusTotal, and it appears on one security blocklist, specifically PhishDestroy. The HTTP status code 302 suggests that the site is redirecting users to another location, which is a common tactic used in phishing attacks to lead victims to malicious pages. The SSL certificate is issued by Let's Encrypt, which is a common certificate authority used by legitimate and malicious sites alike. Given the high risk level and active status, defenders should block access to this domain and monitor their networks for any attempts to access it. Further investigation is recommended to identify the exact nature of the phishing activity and the destination of the redirects. Defenders should also educate users about the risks associated with this domain and ensure that security policies are in place to prevent phishing attacks.