polyspinx[.]com

Analysis of the domain polyspinx[.]com indicates it was actively used in a cryptocurrency-themed gambling scam until its recent takedown. The domain was registered on November 11, 2025, through Name SRS AB and resolved to the IP address 104.21.85.12, which is part of Cloudflare’s network (AS13335) located in the United States. No SSL certificate was present at the time of assessment, increasing the risk of unencrypted data interception. The nameservers, corey.ns.cloudflare.com and ximena.ns.cloudflare.com, further confirm the use of Cloudflare infrastructure, a common tactic to obscure hosting origins and evade simple IP-based blocking. Security vendors detected this domain as malicious, with 12 out of 95 engines on VirusTotal flagging it at the time of scanning.

The domain also appeared in one threat intelligence pulse on AlienVault OTX and was listed on a single security blocklist, specifically PhishDestroy. Gridinsoft assigned it a trust score of 0 out of 100, reinforcing its classification as high-risk. The page title, 'Polyspinx: Most Popular Online Crypto Casino Based on Blockchain,' explicitly identifies the scam type as a fraudulent gambling platform targeting cryptocurrency users. The presence of a 'Gambler Scam' phishing kit, as noted in available intelligence, suggests the site was designed to deceive victims into depositing funds under false pretenses.

While the domain is currently offline, defenders should remain vigilant for related infrastructure. The use of Cloudflare nameservers and hosting complicates traditional IP-based mitigation, making domain-based blocking and monitoring of newly registered lookalike domains critical. Organizations are advised to update blocklists with this domain and investigate any residual connections to 104.21.85.12 or associated Cloudflare IP ranges. Given the cryptocurrency focus, financial institutions and crypto exchanges should flag transactions linked to this domain or its branding for potential fraud.