play[.]tuabax[.]com

Analysis of play.tuabax.com as of August 07, 2026 shows that the domain resolves to the IPv4 address 64.7.198.11 and is currently active. The domain is listed on two security blocklists and has been explicitly blocked by the PhishDestroy and ScamSniffer filtering services, indicating that it is recognized as a malicious resource by multiple independent platforms. VirusTotal has recorded detections from 13 of 91 scanned security vendors, reinforcing the suspicion that the host is being used for malicious purposes.

No additional telemetry such as Safe Browsing status, Open Threat Exchange references, registrar details, SSL certificate information, HTTP response codes, trust‑score metrics, page title, or direct evidence links are available in the supplied intelligence, leaving those aspects of the infrastructure unverified. The lack of publicly observed SSL or HTTP characteristics means that defenders cannot confirm whether the site presents a valid TLS certificate or how it responds to client requests, which adds uncertainty to the full attack surface. Given the confirmed blocklist presence, vendor detections, and active resolution to a known IP, defensive teams should treat play.tuabax.com as hostile.

Recommended actions include adding the domain and its IP address to DNS‑level deny lists, updating web‑proxy and firewall policies to block traffic, configuring intrusion detection signatures to alert on any attempted connections, and monitoring DNS query logs for related look‑ups. Continuous re‑evaluation is advised as further threat intelligence, such as page content analysis or additional vendor scans, becomes available.