octospins[.]com

Analysis of octospins.com as of July 25, 2026 indicates that the domain is being used to host a crypto‑casino phishing campaign. The site’s page title, “Octospins: Most Popular Online Crypto Casino Based on Blockchain,” aligns with the listed scam type of “Crypto Scam” and the identified phishing kit “Gambler Scam.” The domain was registered on September 29, 2025 through Web Commerce Communications Limited and is served by Cloudflare’s DNS (anastasia.ns.cloudflare.com, clay.ns.cloudflare.com). DNS resolution points to IP address 104.21.35.84, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate is present, indicating that the site was served over plain HTTP before being taken offline.

VirusTotal records show that 11 of 95 scanned security vendors flagged the domain, reflecting moderate detection across the ecosystem. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single blocklist, currently listed by PhishDestroy. The current HTTP status is offline, confirming that the infrastructure has been removed or is no longer reachable. The observable evidence confirms the presence of a targeted crypto‑casino lure, but the lack of additional telemetry such as URL paths, credential‑stealing form captures, or referral patterns limits a full behavioural profile.

Defenders should block the domain and its resolving IP at network perimeter devices, update endpoint protection signatures with the 11 vendor detections, and monitor for any future re‑registration of the same second‑level name. Given the use of Cloudflare’s network, any resurgence may leverage the same IP range, so broader Cloudflare ASN filtering may be warranted. Continuous threat‑intel feeds should be consulted for new sightings, and any email or web traffic that references “Octospins” or the associated page title should be flagged for investigation.