playnance[.]live

The domain playnance.live is identified as a cryptocurrency phishing infrastructure targeting users through deceptive transaction or wallet verification schemes. Analysis confirms its current status as offline, though prior activity and technical indicators suggest it was actively used in credential harvesting or fraudulent fund transfer operations. No specific brand impersonation has been confirmed, but the domain name closely resembles legitimate cryptocurrency platforms, increasing the likelihood of user deception. Infrastructure analysis reveals the domain was registered on March 22, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 188.114.97.3. Detection metrics indicate it was flagged by 2 of 95 security vendors on VirusTotal, while Gridinsoft assigned a trust score of 0/100. The domain appears on three independent security blocklists and is explicitly blocked by MetaMask, PhishDestroy, and SEAL. Technologies detected include HSTS, Cloudflare, Cloudflare Browser Insights, and HTTP/3, suggesting the use of modern web infrastructure to evade detection and enhance delivery mechanisms. Current assessment confirms playnance.live is offline, though the domain remains registered and may be reactivated. Organizations and users are advised to maintain blocklist entries for this domain and its associated IP. Network administrators should monitor for DNS queries or HTTP requests to 188.114.97.3, particularly in environments handling cryptocurrency transactions. End users should verify domain authenticity before interacting with any cryptocurrency-related prompts, especially those requesting wallet credentials or private key disclosures. Proactive measures include deploying real-time phishing detection tools and enforcing strict domain validation policies for financial or blockchain-related services.