buffyspin[.]com

The domain buffyspin.com was registered on September 30, 2025 and is currently taken offline. Infrastructure analysis shows that the domain resolves to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The registrar listed for the domain is Web Commerce Communications Limited operating as WebNic.cc. No TLS certificate is present, meaning the site was served over plain HTTP when it was active. The page title captured from the site reads "Buffyspin: Most Popular Online Crypto Casino Based on Blockchain," indicating that the operation was posed as a cryptocurrency gambling platform.

Intelligence sources attribute the site to the Gambler Scam phishing kit, a known generic phishing framework used to harvest credentials for crypto‑related services. The domain appears on one security blocklist and has been specifically blocked by PhishDestroy. A Gridinsoft trust score of 1 out of 100 further reflects a high likelihood of malicious intent. VirusTotal scans reported that six of ninety‑three security vendors flagged the domain, supporting the assessment of malicious activity. AlienVault OTX recorded the domain in a single threat‑intelligence pulse, providing additional corroboration.

Defenders should immediately add buffyspin.com to network‑level deny lists and block outbound connections to the associated IP address. Monitoring for other domains registered through the same registrar or using the Gambler Scam kit is advised, as threat actors often reuse infrastructure. Given the absence of SSL and the low trust score, any residual traffic to this host should be treated as suspicious. Continuous threat‑intel feeds should be consulted for new indicators related to the Gambler Scam family, and security appliances should be updated to reflect the current detection status of the domain.