salospin[.]com

On July 23, 2026, analysis of the domain salospin.com shows that the site was taken offline but retains indicators of a confirmed phishing operation targeting cryptocurrency users. The public page title reads “Salospin: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the listed scam type of “Crypto Scam.” The domain was registered on December 12, 2025 through MAT BAO CORPORATION, and the SSL certificate is identified as “WE1,” a low‑trust certificate often associated with fraudulent sites. A trust score of 1 out of 100 from Gridinsoft further confirms the lack of legitimacy. Infrastructure analysis reveals that the domain resolves to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States.

The same IP is currently listed on the PhishDestroy blocklist, and the domain appears on one additional security blocklist. VirusTotal reports that 12 of 93 scanners flagged the domain, indicating moderate detection across multiple vendors. The site is associated with the “Gambler Scam” phishing kit, a known template used to lure victims into depositing crypto funds under the pretense of a casino offering. Defenders should continue to block the domain at perimeter filters, update URL‑filtering lists, and monitor for any re‑hosting attempts that might arise from the same IP or certificate fingerprint.

Because the site is offline, active takedown is not possible, but threat‑intel feeds should retain the indicator set for future correlation. Uncertainty remains regarding the exact content served before takedown, as no live capture is available; analysts should treat any unverified claims about page layout or credential capture mechanisms as speculative until further evidence is obtained. The combination of a brand‑specific page title, low trust score, malicious kit attribution, multiple vendor detections, and blocklist listings provides sufficient confidence to classify salospin.