solspin.digital

VirusTotal scans show that three of ninety‑five security vendors have flagged the domain, which aligns with its inclusion on at least one public phishing blocklist and the fact that it is listed as blocked by PhishDestroy. The infrastructure appears to be built from a known “Gambler Scam” phishing kit, a template commonly used to lure victims into cryptocurrency‑related fraud. The risk rating is high and the threat type is identified as a generic phishing campaign targeting cryptocurrency users. No additional public intelligence, such as Safe Browsing or OTX entries, is available at this time.

Defenders should treat solspin.digital as malicious: block DNS resolution and HTTP/HTTPS traffic at perimeter devices, add the IP address 69.5.189.54 to deny lists, and monitor for any outbound connections to the domain. Incident response teams should also inspect logs for attempts to access the site, especially from users who handle crypto assets, and consider notifying users of the ongoing scam. Ongoing monitoring of the registrar and name‑server changes is advised, as adversaries may shift hosting or repoint the domain to evade detection.