securespin[.]online

The domain securespin.online was registered on November 30, 2025 through the REGRU-RU registrar and is currently hosted behind Cloudflare's network (AS13335, United States) at IP address 172.67.209.208. DNS resolution points to the authoritative nameservers jamie.ns.cloudflare.com and kanye.ns.cloudflare.com. The site is presently taken offline, but historical analysis shows it presented a page titled "Securespin: Most Popular Online Crypto Casino Based on Blockchain" and leveraged a known Gambler Scam phishing kit, indicating a credential phishing campaign targeting users of crypto gambling platforms. No SSL certificate was observed, meaning the site operated without HTTPS encryption.

Threat intelligence from VirusTotal reports that 12 of 93 scanning engines flagged the domain as malicious, and the domain appears on a single security blocklist. Independent security products, such as Gridinsoft, assigned a trust score of 0 out of 100, reflecting extreme suspicion. PhishDestroy has also listed the domain as blocked. The combination of a low trust score, multiple vendor detections, and inclusion on a blocklist underscores a high likelihood that the domain was used to harvest credentials or crypto wallet information.

Defenders should add securespin.online to URL filtering rules, block the associated Cloudflare IP address (172.67.209.208) across perimeter defenses, and monitor for any future re‑registration or similar domains using the same registrar or nameserver pattern. Updating intrusion detection signatures to flag the Gambler Scam kit identifiers and incorporating the domain into threat intelligence feeds will help mitigate potential reconnaissance or re‑activation attempts. Continuous observation of Cloudflare‑hosted assets linked to this ASN is recommended, as threat actors often repurpose such infrastructure for new campaigns.