spinvin[.]vip

Analysis as of July 25 2026 indicates that the domain spinvin.vip was registered on 21 February 2026 and is presently taken offline. The site resolved to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The TLS certificate presented as “WE1”, a weak or self‑signed indicator that offers little assurance of legitimacy. The page title returned by the server reads “Spinvin: Most Popular Online Crypto Casino Based on Blockchain”, aligning with the classification of a crypto‑casino scam.

The infrastructure is associated with the “Gambler Scam” phishing kit, a known template used to lure victims into fraudulent cryptocurrency gambling operations. Reputation services show a Gridinsoft trust score of 0 out of 100, and the domain appears on one security blocklist. PhishDestroy has already listed the domain as blocked. VirusTotal scans report that 11 of 93 antivirus or URL‑reputation engines flagged the domain, confirming malicious intent despite the relatively low detection count.

The combination of a newly created domain, low trust score, weak SSL, Cloudflare hosting, and alignment with a known gambling‑scam kit suggests a deliberate attempt to exploit interest in blockchain‑based gambling. Uncertainty remains regarding the current activity level, as the site is offline and no additional payloads have been observed. Defenders should immediately block spinvin.vip at DNS and proxy layers, add the associated IP 188.114.96.3 to network‑level deny lists, and monitor for other domains that employ the Gambler Scam kit or reference the same branding. Continuous re‑scanning of the domain and its IP is advised to capture any re‑activation attempts, and threat‑intel feeds should be updated to reflect the observed indicators.