play[.]boegux[.]com

Analysis of play.boegux.com indicates an active phishing domain targeting users through brand impersonation of a blockchain-based online casino. The domain, registered on May 4, 2026, resolves to IP address 188.114.97.3, hosted under Cloudflare infrastructure with nameservers olivia.ns.cloudflare.com and thaddeus.ns.cloudflare.com. Security vendors have flagged the domain, with 13 of 91 detections in recent scans, classifying it as part of the Gambler Scam phishing kit. The site presents itself with the page title 'Boegux: Most Popular Online Crypto Casino Based on Blockchain,' suggesting an attempt to deceive users into engaging with fraudulent gambling services. Infrastructure review reveals the use of Cloudflare services, including Browser Insights and HTTP/3 support, alongside a Let's Encrypt SSL certificate issued under the identifier YE2. The domain is registered through Fewmoretaps OU, operating as Trustname.com, and is currently blocked by at least one security blocklist. While the exact content and functionality of the site remain unconfirmed, the combination of brand impersonation, phishing kit association, and security vendor detections supports a high-risk classification. Defenders should prioritize blocking resolutions to 188.114.97.3 and monitoring traffic to this domain, particularly in environments where gambling or cryptocurrency-related services are prohibited. Further analysis of the Gambler Scam kit may reveal additional indicators of compromise, including associated domains, IP ranges, or payload delivery mechanisms. Given the domain's recent registration and active status, continued vigilance is recommended to mitigate potential user exposure.