willyspin[.]com

The domain willyspin.com was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently taken offline. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. in the United States. No TLS certificate was observed for the host, and an HTTP request returns no active service, confirming the offline status. The page title associated with the domain reads "Willyspin: Most Popular Online Crypto Casino Based on Blockchain," indicating an attempt to present a cryptocurrency gambling service.

Threat intelligence classifies the site as a crypto scam and links it to the Gambler Scam phishing kit, a known template for financial fraud targeting cryptocurrency users. VirusTotal analysis shows that 12 of 95 scanning vendors flagged the domain as malicious, providing independent confirmation of its malicious nature. The domain appears on at least one security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its reputation as a phishing vector.

While the lack of live content limits visibility into the exact phishing payload, the combination of registrar data, hosting location, absent SSL, flagged detections, and blocklist presence constitutes strong evidence of a fraudulent operation. Defenders should proactively block willyspin.com at DNS and proxy layers, monitor outbound connections to the associated Cloudflare IP for any residual activity, and enforce strict controls on cryptocurrency transaction attempts from internal users. Continuous re‑scanning is advised to capture any future re‑activation of the site, and incident response teams should be prepared to investigate any credential or wallet information that may have been exposed by users who previously accessed the domain.