coinplayguide[.]com

coinplayguide.com was registered on April 28, 2026 and resolves to 104.18.37.69, a Cloudflare address located in Canada. The domain uses Cloudflare’s DNS (ian.ns.cloudflare.com, vita.ns.cloudflare.com) and presents a valid Let’s Encrypt certificate (E8). The HTTP response returns 403, preventing content retrieval, but the page title reported is "Safeguarding Your Website — BigScoots", which suggests a possible brand‑impersonation attempt. Threat intelligence indicates the domain appears on one security blocklist and is explicitly blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, and AlienVault OTX references the domain in a single pulse. VirusTotal analysis shows three of ninety‑one scanners flag the domain, reinforcing the malicious assessment. The seed classification is generic_phishing, and the infrastructure—recent registration, low trust score, blocklist presence, and multiple detections—aligns with typical phishing operations. What remains uncertain is the exact payload or credential‑harvesting page, as the 403 status limits direct observation. Defenders should immediately block coinplayguide.com at perimeter controls, add it to internal threat lists, and monitor for any related C2 or credential‑collection activity. Ongoing reconnaissance of the IP and any future content releases is recommended to confirm the attack vector and to adjust detection rules accordingly.