whitebridgepoolpad[.]xyz

PhishDestroy identifies an active generic phishing campaign originating from the domain whitebridgepoolpad.xyz, which impersonates a legitimate pool service application to deceive users into submitting sensitive login credentials. This domain resolves to IP address 188.114.96.3 and was registered on October 16, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED using a Google Trust Services SSL certificate to enhance perceived legitimacy. The domain currently shows an elevated threat status with 4 out of 95 security vendors on VirusTotal flagging it, indicating early-stage detection and potential widespread exposure.

This low-effort phishing threat leverages impersonation and SSL credentialing to exploit user trust, posing significant risk to individuals seeking pool-related services. With a domain creation date less than one month ago and a 4.2% detection rate among security vendors, the campaign demonstrates opportunistic behavior likely targeting unsuspecting users searching for pool maintenance or app services. The use of a trusted SSL certificate further reduces suspicion, increasing the likelihood of successful credential harvesting. The elevated risk level is supported by limited historical blocking data, suggesting this domain may be part of a broader, fast-moving campaign.

If you visited whitebridgepoolpad.xyz or entered any information, immediately change passwords on all accounts using the same credentials and enable multi-factor authentication. Scan your device for malware and monitor financial accounts for unusual activity. Avoid interacting with this domain or any associated links. Report the domain to your security team or through PhishDestroy’s submission portal using seed 00598d for further analysis and blocking assistance.