ferraspin[.]com

This domain, ferraspin.com, was registered on 5 October 2025 through Dominet (HK) Limited and is hosted on Cloudflare’s network (AS13335) with the IPv6 address 2606:4700:3033::ac43:a337, geolocated to the United States. The authoritative nameservers are elisa.ns.cloudflare.com and hal.ns.cloudflare.com, and the site does not present an SSL certificate, indicating the use of plain HTTP. The page title returned by the site, “Ferraspin: Most Popular Online Crypto Casino Based on Blockchain,” suggests that the domain is being used to lure victims into a crypto‑casino investment scheme. Analysis of the hosting environment matches the profile of a “Gambler Scam” phishing kit, and the campaign has been classified as a crypto scam. VirusTotal reports that 12 of 95 scanned security vendors flagged the domain, demonstrating a moderate level of detection across independent scanners.

The domain is listed on at least one public blocklist and has been actively blocked by the PhishDestroy service. Reputation services assign a trust score of 1 out of 100 on both Scamadviser and Gridinsoft, reflecting an extremely low legitimacy rating. At the time of reporting (23 July 2026) the site is offline, but the infrastructure remains reachable and could be re‑activated. Defenders should therefore continue to block traffic to ferraspin.com at the DNS and network layers, monitor for any resurgence of the IPv6 host, and add the domain to internal blocklists. Email security gateways ought to flag any messages containing the domain or the “Ferraspin” brand in subject lines or body content.

Although the SSL/TLS configuration is absent, the lack of encryption does not mitigate the phishing risk; the observable indicators—registrar, hosting, detection counts, and reputation scores—provide sufficient evidence to treat the domain as malicious.