huntspin[.]com

Analysis of the domain huntspin.com indicates it was actively used in a crypto-based gambling scam, classified as a phishing threat with elevated risk. The domain was registered on November 2, 2025, through Dominet (HK) Limited and resolved to the IP address 172.67.164.177, hosted on Cloudflare's infrastructure (AS13335). The page title, 'Huntspin: Most Popular Online Crypto Casino Based on Blockchain,' explicitly identifies the scam type as a fraudulent crypto casino operation. No SSL certificate was detected, increasing the likelihood of unencrypted data transmission.

The domain appears in eight threat intelligence pulses on AlienVault OTX, suggesting prior detection by security researchers. It is flagged by 15 of 93 security vendors on VirusTotal, though the absence of additional context limits attribution to specific malicious behaviors. Gridinsoft assigned a trust score of 1/100, and the domain is listed on one security blocklist. The phishing kit in use is identified as 'Gambler Scam,' though further technical details about the kit's components or distribution methods are not available in the provided intelligence.

Infrastructure analysis reveals the domain used Cloudflare nameservers (karsyn.ns.cloudflare.com and ken.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. As of the report date, the domain is offline, though defenders should monitor for reactivation or migration to new infrastructure. Organizations should block the domain and associated IP at perimeter defenses, and security teams should review logs for prior connections to 172.67.164.177 or related Cloudflare-hosted endpoints. The exact content and functionality of the site remain unanalyzed, but the available indicators confirm its classification as a crypto scam.