topgspin[.]space

Analysis of the domain topgspin.space indicates it was actively involved in brand impersonation targeting a foundation, as classified in threat intelligence records. The domain was registered on February 21, 2026, and resolved to the IP address 104.21.48.1, hosted on Cloudflare infrastructure (AS13335). The site's page title, 'TOPGSPIN | Open the world of luck and rewards!', suggests an attempt to lure users with promises of rewards, a common tactic in brand impersonation schemes. Infrastructure analysis reveals the use of Google Cloud, Nginx, and Google Cloud CDN technologies, which are frequently employed by both legitimate and malicious sites.

The domain has a Gridinsoft trust score of 0/100, indicating a high-risk classification. It appears on one security blocklist and was flagged by one of 93 security vendors on VirusTotal, though the specific detection context remains unclear. The SSL certificate is issued by WE1, a provider often used in both legitimate and fraudulent operations. As of July 25, 2026, the domain has been taken offline, likely due to enforcement actions by security providers such as PhishDestroy.

Defenders should treat this domain as a confirmed phishing resource. While the exact content of the site is not analyzed, the combination of brand impersonation classification, low trust scores, and blocklist presence justifies its inclusion in threat intelligence feeds. Organizations are advised to monitor for any residual DNS resolutions or attempts to resurrect the domain under similar names. No additional brand-specific details are available beyond the foundation impersonation classification, and the scam type is limited to brand impersonation as per the provided data.