heavengame[.]space

Analysis indicates that the domain heavengame.space, created on February 21, 2026 and registered through REGRU-RU, is currently offline but exhibits several indicators of a malicious crypto phishing operation. The site previously served a page titled "Heavengame: Most Popular Online Crypto Casino Based on Blockchain," which aligns with the known scam type of a crypto scam and matches the Gambler Scam phishing kit. Infrastructure observations show that the domain resolved to the IP address 188.114.97.3, hosted within the US under AS13335 (Cloudflare, Inc.). No SSL certificate was present, exposing traffic to potential interception.

The domain is listed on the PhishDestroy blocklist and appears on one additional security blocklist, reinforcing its classification as a phishing resource. VirusTotal scans recorded 14 positive detections out of 93 security vendors, and AlienVault OTX referenced the domain in a single threat intelligence pulse, providing external corroboration of its malicious nature. Trust scoring from Gridinsoft rates the domain at 0 out of 100, indicating extreme distrust. Nameservers jessica.ns.cloudflare.com and tate.ns.cloudflare.com confirm Cloudflare DNS usage, a common choice for fast‑deployed malicious sites.

While the site is currently taken offline, the observed attributes—absence of TLS, low trust score, multiple vendor detections, blocklist listings, and the explicit gambling‑focused phishing kit—suggest a high likelihood of ongoing or recent phishing activity targeting cryptocurrency users. Defenders should continue to block the domain at network perimeter controls, monitor for any resurgence of the hostname, and advise users to avoid any unsolicited communications referencing Heavengame or crypto casino services. Additional reconnaissance on the associated IP may reveal other malicious hostnames, and threat‑intel feeds should be updated to reflect the elevated risk classification.