spinkaz[.]com

Analysis of spinkaz.com, created on October 15, 2025 and presently taken offline, shows a clear pattern of malicious infrastructure. The domain resolves to IP address 172.67.201.4, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Both authoritative nameservers—carol.ns.cloudflare.com and ignacio.ns.cloudflare.com—are hosted by Cloudflare, a common choice for fast‑flux and abuse‑resistant hosting. Registration was performed through MAT BAO CORPORATION, and the domain appears on a single security blocklist.

No SSL certificate is presented, indicating that the site operated without HTTPS protection. The page title captured during the brief online period reads "Spinkaz: Most Popular Online Crypto Casino Based on Blockchain," aligning with the recorded scam type of a crypto‑focused scheme. Gridinsoft assigned a trust score of 1 out of 100, and the site was blocked by PhishDestroy. VirusTotal scans flagged the domain by 10 of 95 security vendors, and the underlying phishing kit has been identified as the Gambler Scam package, which is frequently used to lure victims into fraudulent cryptocurrency gambling offers.

While the offline status precludes direct verification of current content, the combination of a low trust score, malicious kit attribution, multiple vendor detections, and explicit branding in the title provides strong evidence of a phishing operation targeting crypto users. Defenders should immediately block the domain and its associated IP address, add the domain to internal and external blocklists, monitor for any re‑registration attempts, and enforce strict e‑mail and web filtering for similar crypto‑casino terminology. Continuous observation of Cloudflare‑hosted IP ranges associated with this domain is recommended to detect potential resurgence or related campaigns.