playza365[.]com

The domain playza365.com is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency platform blast. This site was designed to deceive users into believing they were interacting with a legitimate sports and betting service, as indicated by its page title 'PLAYZA365 | Enter the world of sport and stakes!'. As of the latest verification, playza365.com has been taken offline, though it previously posed an elevated risk of credential theft or fraudulent transactions under the guise of the blast brand.

Technical indicators confirm the malicious nature of playza365.com. The domain was flagged by 1 of 95 security vendors on VirusTotal, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). It was registered through Porkbun LLC on August 15, 2025, and resolved to the IP address 57.129.97.29, hosted by OVH SAS in Germany (AS16276). The SSL certificate was issued by XUI.one, and the domain used Cloudflare nameservers (amalia.ns.cloudflare.com and jeremy.ns.cloudflare.com). Google Safe Browsing did not flag the domain, but Gridinsoft assigned it a trust score of 0/100, reinforcing its classification as a phishing threat.

Users who interacted with playza365.com should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or fraudulent activity. If cryptocurrency was involved, revoking token approvals and transferring funds to a new wallet is recommended. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand (blast) to aid in takedown efforts and prevent further victimization.