parlaymatch[.]io

This domain, parlaymatch.io, was registered on 2026-06-08 and is currently active. DNS resolution points to IP 216.198.79.1, which is geolocated to the United States and associated with Lefkoff Industries. The host serves HTTP 307 redirects and presents a TLS certificate issued by Let’s Encrypt (R12) with HSTS enabled. Fingerprinting of the web stack identified Node.js, Express, and Vercel runtime components. Mail exchange is delegated to parlaymatch-io.mail.protection.outlook.com. Threat intelligence sources list the domain in four AlienVault OTX pulses and on three public blocklists; twelve of ninety‑one VirusTotal scanners have flagged it as malicious. The observed activity aligns with credential‑phishing campaigns targeting users of decentralized sports‑parlay platforms, as indicated by the page title “PARLAYMATCH | Decentralized P2P Sports Parlay”. While the exact phishing payload has not been captured, the combination of recent registration, active infrastructure, and multiple detections justifies a high risk rating. Defenders should block the domain at network perimeter, monitor outbound connections to the associated IP, and enforce strict email filtering for the listed MX host. Continuous observation is recommended to detect any evolution of the lure or additional infrastructure.