suiplay0x1[.]site

On July 23, 2026, investigators identified the domain suiplay0x1.site as part of an elevated‑risk crypto‑scam campaign that masquerades as Coinbase. The site was registered on August 2, 2025 through the HOSTINGER operations, UAB registrar. DNS resolution points to the IPv6 address 2a06:98c1:3120::3, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. The SSL certificate presented is labeled WE1, confirming the presence of HTTPS but offering no additional trust signals.

The page title returned by the server is "Playtron Landing," which does not reference Coinbase and suggests the landing page content has not been publicly disclosed. Independent security services have catalogued the domain on two blocklists, and commercial blocklist operators PhishDestroy and ScamSniffer have explicitly flagged it as malicious. A trust score from Gridinsoft rates the domain at 0 out of 100, indicating a total lack of reputation. VirusTotal analysis shows that 12 out of 93 scanning engines flagged the domain, reinforcing the suspicion of malicious intent.

The domain’s current status is offline, but the historical evidence points to a previously active infrastructure used for cryptocurrency‑related fraud. Defenders should add suiplay0x1.site to network deny lists, monitor for any re‑registration of the same name or similar domains hosted on the same Cloudflare IP block, and enforce outbound filtering for connections to the identified IPv6 address. Continuous verification of newly observed domains that resolve to the same AS13335 range is recommended, as threat actors frequently reuse Cloudflare assets for fast‑flux operations. This assessment is referenced by seed 0c39d4 for internal tracking purposes.