viva-spin[.]fun

The domain viva-spin.fun was registered on December 11, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. It uses Cloudflare nameservers (chan.ns.cloudflare.com, terry.ns.cloudflare.com) and resolves to IP address 147.45.219.83, which belongs to AS33842 Citytelecom LLC located in Russia. No SSL certificate is presented for the host, indicating the site was served over plain HTTP. The page title returned by the server is "VivaSpin" and the site claims to impersonate the brand argent, fitting the listed scam type of crypto gambling.

Reputation checks show a Gridinsoft trust score of 0 out of 100, and the domain is listed on a single security blocklist. It has been flagged by PhishDestroy and two of ninety‑five VirusTotal security vendors have reported the domain as malicious. No additional detection from Safe Browsing, OTX, or other threat feeds is recorded in the supplied intelligence. The available evidence points to a low‑quality, brand‑impersonating gambling lure that likely seeks cryptocurrency deposits from unsuspecting victims.

Because the site is currently offline, active mitigation is limited to pre‑emptive blocking. Defenders should add viva-spin.fun to URL filtering rules, enforce DNS blocklists that include the domain, and monitor outbound traffic to the associated IP address 147.45.219.83 for any residual connections. Continual observation of the IP’s activity is advised, as the infrastructure could be reused for future malicious campaigns.