splnex[.]top

The domain splnex.top is identified as a high-risk brand impersonation threat targeting the Crypto Casino / Gambling sector. Analysis indicates that the domain is designed to mimic a legitimate online crypto casino, potentially misleading users into believing it is a trusted platform. The threat does not appear to involve a specific crypto drainer kit but is focused on brand impersonation to gain user trust and steal sensitive information.

Technical indicators reveal that splnex.top is currently flagged by 3 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection. The domain is registered through Global Domain Group LLC and resolves to the IP address 172.67.138.242, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain was created on February 07, 2026, and does not have an SSL certificate, which could indicate a lack of security measures. The site appears on 1 security blocklist, specifically PhishDestroy, and is not listed in the Google Safe Browsing database.

The domain remains active, posing a significant risk to users who may be tricked into providing personal or financial information. Security teams are advised to monitor this domain and consider blocking it at the network level to prevent access. Users should be educated to verify the legitimacy of online crypto casinos through official channels and avoid clicking on suspicious links. Despite the current blocklist presence, the threat persists, and ongoing vigilance is necessary to mitigate potential damage.