MALICIOUS — HIGH
spintitan.net Credential Theft Alert
spintitan[.]
spintitan.net is an active credential theft domain linked to Web3-themed lures, with 2 of 95 security vendors currently flagging it.
- VirusTotal
- 2/91
- Blocklists
- 2 · MetaMask, SEAL
- Ketersediaan
- Terselubung · dapat dijangkau · HTTP 666
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
spintitan.net — Terselubung · dapat dijangkau (HTTP 666). Peniruan identitas merek: Cryptoscam; Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 2/91 (Forcepoint ThreatSeeker, SOCRadar); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: Fewmoretaps OU d/b/a T….
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Analysis
Analysis indicates that spintitan.net presents a credential theft risk through a Web3-themed interface titled "Spintitan | Decentralized Web3 Gambling Site with Provable Trust." The site is assessed as high risk and remains active at the time of review. Although no verified brand impersonation has been identified from the available evidence, the domain's presentation may be used to encourage users to connect accounts, submit authentication information, or disclose sensitive data. Such activity can result in unauthorized account access, loss of digital assets, or compromise of associated credentials. Given the active status of the infrastructure, any interaction involving login details, wallet-related approvals, recovery phrases, or personal information should be considered potentially unsafe.
Technical evidence supports the assessment. The domain was created on June 12, 2026 and is registered through Fewmoretaps OU d/b/a Trustname.com. Infrastructure analysis shows that the domain resolves to IPv6 address 2a06:98c1:3120::3 and is hosted within a United States-based network under AS13335. The observed TLS certificate is issued by Google Trust Services / WE1. Security telemetry indicates that 2 of 95 VirusTotal vendors currently flag the domain. The domain appears on 1 security blocklist and has been reported by PhishDestroy. While the detection count is relatively limited, the combination of recent registration, active operation, security reporting, and blocklist inclusion contributes to the overall high-risk classification.
Users who visited spintitan.net should determine whether any credentials, authentication codes, wallet approvals, seed phrases, personal information, or financial details were disclosed. If login credentials were entered, passwords should be changed immediately and reused credentials should be rotated across other services. If account permissions or wallet authorizations were granted, those permissions should be reviewed and revoked where appropriate. Security teams should monitor logs for connections to spintitan.net and the associated address 2a06:98c1:3120::3, investigate any related authentication events, and update filtering controls to block future access. Because the domain remains active and has accumulated independent security detections, continued monitoring and defensive controls are recommended to reduce exposure to credential theft attempts.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Cakupan data12 recorded checks
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Teknologi · 4 identified
Twitter Ads is an advertising platform for Twitter 'microblogging' system.
ads.twitter.com Keyakinan 100%Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com Keyakinan 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%Analisis VirusTotal
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260617-A8DC68 Recipient: abuse@trustname.com Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.