spinrune[.]com

The domain spinrune.com was registered on February 21, 2026 through MAT BAO CORPORATION and resolves to the IPv4 address 57.129.97.29, which belongs to AS16276 operated by OVH SAS in Germany. The authoritative name servers are columbus.exaroton.com and galileo.exaroton.com, both of which are typical of the exaroton hosting platform. An SSL certificate identified by the GUID 52a791d4-724b-4895-8c09-162693f82088 is present, but the site returns an HTTP 403 status code, indicating that direct content retrieval is currently blocked. The page title "SPINRUNE | Enter the world of sport and stakes!" aligns with a gambling‑related theme, and the intelligence classifies the activity as a gambling scam, a subset of generic phishing.

Infrastructure analysis shows that the domain appears on a single security blocklist and has been flagged by PhishDestroy as malicious. Despite a clean VirusTotal scan (0/95 detections) and a Gridinsoft trust score of 0/100, the presence on the blocklist and the active blocking by a dedicated anti‑phishing service suggest that the site is being used for illicit purposes. The domain’s hosting in Germany under OVH provides a stable platform for the operators, and the use of exaroton name servers may indicate reliance on a shared hosting environment to obscure the true origin of the malicious content.

Current observations indicate that the site remains active, though the 403 response limits immediate content analysis. The exact phishing kit, victim targeting strategy, and any associated command‑and‑control infrastructure have not been publicly disclosed, representing gaps in the open‑source intelligence picture. Defenders should therefore treat spinrune.com as a high‑confidence malicious indicator and incorporate it into domain blocklists, DNS sinkholing, and outbound traffic monitoring. Continuous probing of the IP address and periodic re‑assessment of the blocklist status are recommended to capture any changes in the site’s behavior or content.