spainspin[.]com

As of the report date of July 23, 2026, the domain spainspin.com is flagged as an elevated‑risk generic phishing site that impersonates a cryptocurrency casino, as indicated by its page title "Spainspin: Most Popular Online Crypto Casino Based on Blockchain" and the classification of the underlying kit as a Gambler Scam. The domain was registered through MAT BAO CORPORATION on November 28, 2025, and resolves to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. DNS resolution is provided by the Cloudflare nameservers nash.ns.cloudflare.com and paloma.ns.cloudflare.com. No TLS certificate is present, meaning the site served HTTP only, and it is currently taken offline.

VirusTotal records indicate that 13 of 95 security vendors have flagged the domain, reflecting moderate detection across the intelligence community. Additional corroboration comes from a single AlienVault OTX pulse and inclusion on one security blocklist, while PhishDestroy has explicitly blocked the domain. The Gridinsoft trust score of 1 out of 100 underscores the site’s low reputation.

Defenders should update URL filtering and DNS block lists to include spainspin.com, monitor for any resurgence of the underlying IP or associated Cloudflare nameservers, and apply the same precautions to any new domains that appear to use the Gambler Scam kit. Given the lack of SSL and the offline status, automated crawling may be limited, but threat‑intel feeds should be consulted regularly for any re‑hosting attempts. Immediate action includes adding the domain to endpoint and network perimeter blocklists, enforcing strict outbound filtering for connections to Cloudflare‑hosted IPs not previously authorized, and correlating logs for any residual traffic that may have reached the site before its takedown.