xspin[.]pw

The domain xspin.pw was created on 21 February 2026 and is currently taken offline. DNS resolution points to the IP address 172.67.178.246, which is hosted in the United States under AS13335 Cloudflare, Inc. The site presented the page title “XSPIN | Open the world of luck and rewards!” and is classified as a crypto gambling scam, indicating it likely attempts to lure victims with promises of gambling‑related rewards tied to digital assets. The SSL certificate associated with the domain is identified as WE1, and the Gridinsoft trust score is recorded at 0 out of 100, reflecting an extremely low reputation rating. Three of ninety‑three security vendors on VirusTotal flagged the domain, suggesting that a minority of scanners have identified malicious characteristics. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service, confirming that at least one anti‑phishing platform has recognized it as hostile.

No additional blocklists or safe‑browsing services are reported in the available intelligence. Analysis indicates that the primary risk vector is a phishing campaign that leverages the crypto gambling narrative to extract credentials or funds from unsuspecting users. The low trust score and limited vendor detection may reflect the recent registration date and rapid takedown, limiting exposure time. However, the presence of a Cloudflare‑fronted IP suggests the operators used a common CDN to obscure origin hosting, a tactic frequently observed in phishing infrastructure.

Uncertainty remains regarding the full scope of the campaign, such as the number of harvested credentials or whether additional domains share the same hosting infrastructure. Because the domain is offline, real‑time monitoring of its DNS and any re‑appearance on the same IP should be continued.