xspins[.]cc

Analysis of the domain xspins.cc shows multiple indicators of malicious activity consistent with a crypto‑focused phishing operation. The domain was registered on February 21, 2026 through NiceNIC International Group Co., Limited, a registrar that has been used for other abusive registrations. The public page title advertised as “Xspins: Elon Musk’s Official Crypto Casino Powered by Blockchain” aligns with the declared scam type of a crypto scam and the use of a Gambler Scam phishing kit, suggesting a fraudulent attempt to lure victims with a false cryptocurrency casino narrative. The site lacks an SSL certificate, indicating an insecure HTTP service that is typical for many fast‑deployed phishing pages.

VirusTotal scans recorded 16 detections out of 93 security vendors, providing independent confirmation that the domain is regarded as malicious by a significant portion of the security community. Additionally, the domain appears on one security blocklist and is actively blocked by PhishDestroy, reinforcing its classification as a threat. Network observations reveal that xspins.cc resolves to the IPv6 address 2a06:98c1:3121::3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. The use of Cloudflare’s infrastructure is common for threat actors seeking anonymity and resilience.

Current HTTP status indicates the site is offline, which may be a temporary takedown or a deliberate change in operation; however, the historical evidence remains sufficient for defensive actions. Defenders should add xspins.cc to domain blocklists, monitor the associated IP range for any re‑activation, and consider extending filters to cover related subdomains or future registrations that use the same registrar or hosting provider. Continuous observation of threat‑intel feeds for new detections related to the Gambler Scam kit and associated crypto‑scam campaigns is recommended to maintain situational awareness.