henoplays[.]com

Analysis of henoplays.com indicates that the site was operated as a crypto‑focused gambling scam. The domain, created on August 27, 2025, was registered through Web Commerce Communications Limited and resolved to the Cloudflare address 104.21.34.106, which is associated with AS13335 Cloudflare, Inc. in the United States. No SSL certificate was observed, leaving the HTTP connection unencrypted. The page title "Henoplays: Most Popular Online Crypto Casino Based on Blockchain" aligns with the reported crypto scam classification and the identified phishing kit labeled as a Gambler Scam.

Security telemetry shows the domain appears on a single blocklist and has been specifically blocked by PhishDestroy. VirusTotal scans recorded 13 detections out of 95 participating security vendors, reinforcing the malicious assessment. Additional reputation data includes a Gridinsoft trust score of 1 out of 100, indicating an extremely low trustworthiness rating. The authoritative nameservers listed are odin.ns.cloudflare.com and sneh.ns.cloudflare.com, both belonging to Cloudflare's DNS infrastructure.

Current infrastructure status is reported as offline, suggesting the site has been taken down or is no longer reachable. Defenders should proactively block henoplays.com at the DNS and network layers, add the associated IP address 104.21.34.106 to any relevant deny lists, and monitor for any re‑use of the Cloudflare IP range for similar scams. Continuous observation of the registrant Web Commerce Communications Limited and the employed Gambler Scam kit may provide early indicators of related campaigns. Given the elevated risk rating and the concrete evidence of malicious activity, organizations are advised to treat any traffic to this domain as hostile and to educate users about the specific crypto casino lure used in this campaign.