glowspin[.]today

glowspin.today was observed as a newly registered domain (creation 21 Feb 2026) that was quickly associated with a crypto gambling scam. The domain resolves to the Cloudflare IP 104.21.77.168, located in California, and is served through Cloudflare's infrastructure (SSL certificate labeled WE1). Passive checks show the site returned HTTP 522 (Connection timed out) at the time of analysis, confirming it is no longer reachable. VirusTotal scans report 13 of 95 AV engines flagging the host, and the domain is listed on a single external security blocklist.

It has been manually blocked by the PhishDestroy mitigation service. Registration details indicate the registrar is NiceNIC International Group Co., Limited. The threat is categorized as generic phishing with a specific crypto gambling lure, and the risk rating is elevated. While the page content could not be captured due to the timeout, the combination of rapid registration, malicious hosting, multiple vendor detections, and blocklist presence provides strong evidence of malicious intent.

Defenders should continue to enforce deny-list controls for the domain and its resolving IP, monitor for any re-activation of the host, and apply network-level filtering for Cloudflare-originating addresses that match the observed IP. Additional investigation of any related subdomains or certificates issued by the same registrar may uncover further malicious infrastructure. The lack of current live content limits deeper behavioral analysis, so ongoing feed updates are recommended.