xbetspins[.]com

This domain, xbetspins.com, is currently active and classified as a high‑risk crypto‑scam phishing site. The site was registered on 14 June 2025 through Tucows Domains Inc. and resolves to the IPv4 address 69.5.189.57, which is advertised as being located in Switzerland and belongs to AS42624 (Global‑Data System IT Corporation). DNS resolution uses four nameservers operated by nameserverhub.com. The TLS certificate is issued by GoDaddy.com (GoDaddy TLS Intermediate CA DV – R1v1), confirming the use of a legitimate‑looking HTTPS endpoint. The page title “XBETSPINS | Play at the best online casino based on Blockchain” indicates that the site is positioned as a blockchain‑based gambling portal, and analysis of the page content has identified the Gambler Scam phishing kit. VirusTotal scans show 13 of 95 security vendors flag the domain, and the domain appears on at least one public blocklist and is blocked by PhishDestroy. AlienVault OTX reports a single threat‑intel pulse referencing the domain. The evidence points to a coordinated attempt to lure victims into depositing cryptocurrency or personal information under the pretense of a blockchain casino. No further technical artifacts such as malicious payloads or credential‑harvesting forms have been publicly disclosed. Defenders should add the domain and its resolving IP to outbound‑allow and inbound‑block lists, monitor DNS queries for the listed nameservers, and consider sinkholing the address. Continuous re‑inspection of the site for new malicious content is recommended, as the threat actor may update the kit or introduce additional payloads.