xspin7[.]com

The domain xspin7.com is currently listed as an offline crypto‑gambling phishing site. Registration data show the domain was created on 2025‑03‑02 through Hello Internet Corp and uses the authoritative name servers ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com and ns4.nameserverhub.com. DNS resolution points to the IPv4 address 69.5.189.58, which is allocated to AS42624 Global‑Data System IT Corporation and geolocated to Switzerland. No TLS certificate is presented, indicating the site operated over plain HTTP only. Threat intelligence sources flag the domain as malicious.

VirusTotal reports a single positive detection out of 95 scanning engines. PhishDestroy has actively blocked the domain, and the domain appears on at least one external security blocklist. Gridinsoft assigns a trust score of 1 / 100, the lowest possible rating. The page title returned from the host is the literal string “xspin7.com”, providing no additional context about the alleged service. The only concrete indicator of the campaign’s purpose is the classification “Crypto Gambling” supplied in the intelligence feed.

No further artefacts such as phishing landing‑page content, credential‑stealing forms, or malicious payload hashes have been disclosed, so the exact tactics employed remain unknown. The lack of SSL, low trust score, and presence on multiple blocklists collectively suggest a high likelihood of fraudulent activity targeting users interested in cryptocurrency gambling. Defenders should add 69.5.189.58 to network‑level deny lists, enforce blocking of xspin7.com at DNS and web‑proxy layers, and monitor for any residual traffic to the IP or its ASN. Because the domain is offline, any active campaigns have likely ceased, but threat‑intel feeds should be updated to retain the indicator for future correlation. Continuous re‑evaluation is advised in case the infrastructure is re‑used under a new domain.