spinmax-portal[.]xyz

PhishDestroy identifies spinmax-portal.xyz as an active credential harvesting portal designed to mimic legitimate login interfaces and steal user credentials. The domain is currently classified under investigation with a confirmed threat status of generic phishing. No specific brand impersonation has been officially documented at this stage, but the portal’s interface closely resembles common gaming or service login pages, suggesting potential targeting of gaming or tech service accounts.

This domain was flagged by 9 of 95 VirusTotal vendors as of the latest scan, indicating it remains undetected by most antivirus engines. Registered through Dynadot LLC on June 15, 2025, the domain resolves to IP address 188.114.96.3 and is secured with a Google Trust Services SSL certificate. The domain has not been listed on any major threat intelligence blocklists, and its low detection rate may indicate a recently activated campaign with limited footprint.

While the phishing portal remains active, users are strongly advised to avoid interacting with spinmax-portal.xyz and to report any encountered login prompts from this domain. Organizations should monitor network traffic for connections to 188.114.96.3 and consider blocking the domain at the DNS level. If credentials were entered, users should immediately reset passwords on all related accounts and enable multi-factor authentication where available. Exercise caution with unsolicited login prompts and verify the legitimacy of domains before entering sensitive information.