spincore[.]info

Analysis of spincore.info shows a recently registered domain (created 17 January 2026) that was hosted behind Cloudflare’s network (AS13335) and resolved to 188.114.96.3 in the United States. The registrant information lists NiceNIC International Group Co., Limited as the registrar. No TLS certificate was observed, indicating the site was served over plain HTTP at the time it was taken offline. The page title retrieved from the live snapshot reads “Spincore: Most Popular Online Crypto Casino Based on Blockchain,” and the threat taxonomy classifies the site as a crypto‑related scam.

The infrastructure matches the “Gambler Scam” phishing kit, a known template used to lure victims into fraudulent cryptocurrency gambling operations. Reputation services provide a Gridinsoft trust score of 1 / 100, and the domain is listed on at least one public blocklist, specifically PhishDestroy. VirusTotal scans returned 15 positive detections out of 93 vendors, confirming that multiple independent engines consider the host malicious. Nameserver records point to coraline.ns.cloudflare.com and lynn.ns.cloudflare.com, consistent with the Cloudflare front‑end.

The site has been taken offline, but the historical artifacts indicate a typical phishing‑as‑a‑service deployment that leveraged brand‑agnostic language to attract crypto users. Defenders should continue to block any outbound connections to 188.114.96.3, add spincore.info to internal URL blacklists, and monitor for related domains that reuse the same registrar or naming patterns. Ongoing observation of Cloudflare‑hosted assets linked to the Gambler Scam kit is recommended, as attackers frequently spin up new copies after takedown.