# portals-wormhole.xyz — SUSPICIOUS

> Check portals-wormhole.xyz – this domain engages in brand impersonation targeting Wormhole. VirusTotal shows 0/95 detections currently. Check the full report.

## Summary
PhishDestroy identifies portals-wormhole.xyz as a high-risk brand impersonation domain actively targeting Wormhole, currently under investigation for malicious intent.

This domain was flagged for impersonating the Wormhole brand, with creation registered on March 23, 2026, through Dynadot LLC. It resolves to IP address 188.114.96.3 and holds a valid Let's Encrypt SSL certificate. VirusTotal currently reports zero detections out of 95 scanners, indicating it has not yet been widely blacklisted or flagged on major security platforms.

Users should avoid interacting with portals-wormhole.xyz, as it may be used to deceive visitors into divulging sensitive credentials or installing malware. If you suspect exposure, revoke any shared passwords immediately. Report this domain to Wormhole’s official security team and your local cybercrime unit. Use a reputable URL checker or browser extension to verify domains before engagement.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Wormhole

## Domain Intelligence
- Registered: 2026-03-23 15:37:39
- Registrar: Dynadot LLC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b5200593-5835-4c97-bdb2-89a3cc7d91b3
- PhishDestroy: https://phishdestroy.io/domain/portals-wormhole.xyz/
- LLM endpoint: https://phishdestroy.io/domain/portals-wormhole.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/portals-wormhole.xyz/
Last updated: 2026-03-30