jegoplays[.]com

The domain jegoplays.com was created on September 02, 2025 and is registered through Web Commerce Communications Limited. Analysis shows the site resolves to the Cloudflare IP address 104.21.0.230, which is associated with AS13335 Cloudflare, Inc. in the United States. The authoritative nameservers are chad.ns.cloudflare.com and rachel.ns.cloudflare.com. No SSL certificate was observed, indicating the site served over HTTP only. The page title captured during the investigation reads “Jegoplays: Most Popular Online Crypto Casino Based on Blockchain,” confirming the lure of a crypto‑focused gambling service.

The threat is classified as a Crypto Scam and is associated with the Gambler Scam phishing kit. Reputation checks reveal a Gridinsoft trust score of 1 out of 100, and the domain is listed on a single security blocklist. VirusTotal scanned the domain and 13 of 95 security vendors reported it as malicious. PhishDestroy has already taken the site offline, and the current status is reported as offline.

Defenders should continue to block the domain and its hosting IP, monitor for any redeployment of the same infrastructure, and consider adding the IP range to network‑level deny lists. Additional scrutiny of any traffic to Cloudflare edge nodes originating from the same IP may reveal related campaigns. Because the site lacks TLS, any future incarnation would be easily detectable by TLS inspection. Until further indicators emerge, the domain remains an elevated‑risk crypto‑scam indicator that should be treated as malicious.