spinzy[.]win

This domain, spinzy.win, poses a high-risk brand impersonation threat targeting users of cryptocurrency-based gambling platforms. Analysis indicates the site mimics legitimate online crypto casinos, presenting itself as 'Spinzy: Most Popular Online Crypto Casino Based on Blockchain.' The infrastructure is designed to deceive users into depositing cryptocurrency under false pretenses, likely leading to unauthorized fund transfers or credential harvesting. The page employs tracking technologies such as Twitter Ads and Facebook Pixel, suggesting a coordinated effort to target victims through social media and advertising networks. Evidence supporting the malicious classification includes detection by 15 out of 95 security vendors on VirusTotal, a Scamadviser trust score of 1 out of 100, and presence on three security blocklists. The domain was registered on March 9, 2026, through Gname.com Pte. Ltd., and resolves to the IP address 172.67.192.120, protected by Cloudflare. The SSL certificate is issued by Let’s Encrypt, a common tactic to appear legitimate while concealing malicious activity. Additional red flags include blocking by MetaMask, PhishDestroy, and SEAL, further confirming its fraudulent nature. Users who have visited spinzy.win or interacted with its content should immediately cease all engagement and revoke any connected wallet permissions. Cryptocurrency transactions initiated on this platform are likely irreversible; victims should report the incident to their wallet provider and relevant blockchain analysis services. It is recommended to scan local devices for malware, as phishing sites often distribute additional payloads. Security teams should update blocklists to include this domain and its associated IP address to prevent further exposure.