uspin[.]my

Analysis of the domain uspin.my indicates it is a confirmed phishing site associated with a crypto-gambling scam, specifically targeting users with false claims of affiliation to a high-profile political figure. The domain was registered on February 21, 2026, through Global Domain Group LLC and is currently offline. Infrastructure analysis reveals it resolved to IP address 188.114.97.3, hosted on Cloudflare’s network (AS13335), a common obfuscation tactic used in phishing campaigns to mask the true origin of malicious content. The SSL certificate, issued by Google Trust Services (WE1), provides encrypted connections but does not validate the legitimacy of the site’s content or operators. The page title, 'Uspin: Donald Trump’s Leading Blockchain Crypto Casino,' explicitly frames the site as a crypto-gambling platform leveraging a political figure’s name to lend false credibility. This aligns with the classification of a 'Gambler Scam' phishing kit, as identified in the available intelligence.

Detection data shows the domain appears on one security blocklist, and three of 93 security vendors on VirusTotal flagged it as malicious. While the detection count is modest, the presence on a blocklist and the specific scam classification elevate the risk assessment. Defenders should note that the domain’s nameservers (ada.ns.cloudflare.com and thomas.ns.cloudflare.com) and hosting provider are consistent with infrastructure used in other phishing operations. The registrar, Global Domain Group LLC, has been associated with domains involved in fraudulent schemes, though this alone does not confirm malicious intent. The Gridinsoft trust score of 0/100 further corroborates the domain’s classification as untrustworthy.

Given the site’s current offline status, it may be undergoing takedown procedures or preparing for redeployment under a different guise. Organizations should block uspin.my at the DNS and proxy levels to prevent user access.