playrtag[.]com

playrtag.com is currently active and returns HTTP 200 with no TLS certificate. The domain was registered on 2026-02-21 through NameCheap, Inc. and uses the default NameCheap verification nameservers (failed-whois-verification.namecheap.com, verify-contact-details.namecheap.co). DNS resolution points to 190.115.31.100, an address hosted by Iqweb LLC in Belize. The site appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal reports two detections out of ninety-five scanned scanners, indicating that at least a minority of AV engines recognize malicious behavior. Gridinsoft assigns a trust score of 0 / 100, reinforcing the low credibility of the host. No SSL/TLS is deployed, which is typical for many phishing deployments that rely on HTTP connections to avoid additional certificate costs. The page title is simply “playrtag.com”, providing no further context about the intended victim or lure. While the exact phishing campaign details have not been disclosed, the combination of recent registration, low-reputation hosting, multiple vendor detections, and blocklist listing supports a high-risk classification. Defenders should add the domain and its resolved IP address to blocklists, monitor for any DNS or HTTP traffic to the host, and consider broader network-level filtering for related Iqweb LLC infrastructure. Continued observation is recommended to capture any evolving payloads or victim-interaction patterns.