play[.]rackswin[.]com

Analysis indicates that the domain play.rackswin.com is currently active and poses a high risk as a phishing threat. The domain is registered through Fewmoretaps OU, operating under the name Trustname.com. It is hosted on an IP address (64.7.198.11) located in Romania, provided by BL Networks. The domain resolves with an SSL certificate from Let's Encrypt, specifically issued to YE1. This indicates a potential attempt to appear legitimate. The domain is associated with one security blocklist, specifically PhishDestroy. Current observations show that it has received a flag from 18 out of 91 security vendors on VirusTotal, marking it as suspicious. Given the status and the active threat level, it is advisable for organizations to implement strict monitoring and blocking measures against this domain. Security teams should ensure that employees are aware of this phishing threat and educate them on identifying such domains to mitigate risks.