jetxspin[.]com

This domain, jetxspin.com, is actively flagged as a high-risk phishing infrastructure targeting users of online gambling platforms. Registered on February 10, 2025, through NameSilo, LLC, the site presents itself as a blockchain-based online casino, as evidenced by its page title: 'JETXSPIN | Play at the best online casino based on Blockchain.' Analysis indicates the domain is associated with the Gambler Scam phishing kit, a known framework for fraudulent gambling sites. Infrastructure analysis reveals the domain resolves to IP address 69.5.189.56 and uses a Let's Encrypt SSL certificate, a common choice for both legitimate and malicious sites. Detection data shows the domain is currently blocked by at least two security vendors (PhishDestroy and BLP-Malware) and appears on two security blocklists. Eleven of 95 security vendors on VirusTotal have flagged the domain, though the specific detection categories remain unconfirmed. AlienVault OTX records the domain in one threat intelligence pulse, suggesting limited but present visibility in threat-sharing communities. The domain remains active as of July 12, 2026, with no evidence of takedown or mitigation. Defenders should treat this domain as part of a broader fraudulent gambling operation, likely designed to harvest user credentials, financial details, or facilitate unauthorized transactions. While the exact content and user interaction flow are not yet analyzed, the presence of a known phishing kit and consistent detection across multiple sources confirm its malicious intent. Network-level blocking and monitoring of related infrastructure (e.g., resolving IP, associated domains) are recommended to disrupt this campaign.