play[.]zaecex[.]com

The domain play.zaecex.com is currently classified as an active generic phishing threat with an elevated risk rating. Infrastructure analysis shows that the domain resolves to the IP address 172.67.192.134, a host that is commonly shared among malicious actors and is not associated with a known reputable service. The domain has been listed on a single security blocklist and is actively blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing provider has identified malicious activity originating from this name.

VirusTotal scans reveal that 11 of 91 security vendors have flagged the domain, providing independent corroboration of its malicious nature. No additional public data such as page titles, SSL certificate details, or HTTP response codes are available, leaving the exact content and phishing lure unspecified. The lack of further observable attributes means that analysts cannot confirm the specific phishing vector (e.g., credential harvesting, credential‑stealing login page) or the targeted brand, if any.

Defenders should therefore treat any traffic to play.zaecex.com as potentially hostile. Recommended actions include blocking the domain at network perimeters, updating endpoint allow‑lists to deny resolution of the associated IP, and monitoring DNS logs for queries to this name. Organizations using web filtering should ensure the domain is added to block policies, and security teams should continue to observe threat‑intel feeds for any new indicators that may clarify the phishing campaign’s scope or payload.