noxplay[.]fun

On July 23, 2026 analysts observed that the domain noxplay.fun is currently offline but remains flagged as a crypto‑related phishing site. The page title returned by the site was "Noxplay: Most Popular Online Crypto Casino Based on Blockchain," indicating a targeted lure toward cryptocurrency users. Registration information shows the domain was created on October 06, 2025 through the Atak Domain registrar. Infrastructure analysis reveals the domain resolves to IP address 188.114.96.3, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States.

The domain uses the Cloudflare nameservers galilea.ns.cloudflare.com and scott.ns.cloudflare.com, and no SSL certificate was presented during the scan. Reputation scoring is extremely low, with Gridinsoft assigning a trust score of 0 out of 100. Malware and phishing detection services have identified the site as employing the "Gambler Scam" phishing kit, and 12 of 95 VirusTotal security vendors have flagged the domain as malicious. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy.

Although the site is offline, the combination of a targeted crypto casino theme, low trust score, multiple vendor detections, and blocklist presence warrants continued defensive action. Security teams should ensure that noxplay.fun is added to local and network‑level blocklists, monitor the associated IP 188.114.96.3 for any future activity, and watch for related domains that reuse the same nameservers or phishing kit. Continued observation is recommended to detect any re‑hosting attempts or variations of the Gambler Scam kit that could target cryptocurrency users.