spinchance[.]top

PhishDestroy identifies spinchance.top as an active generic phishing domain currently under investigation for impersonation of a cryptocurrency platform. The domain is associated with a suspected cryptocurrency drainer kit designed to deceive users into connecting their wallets and transferring digital assets. No specific brand has been confirmed at this stage, but the infrastructure suggests financial motivation consistent with crypto phishing campaigns. The threat is classified as active pending further forensic analysis.

This domain was flagged with exact technical indicators including a VirusTotal detection score of 0 out of 95 engines, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolving to IP address 104.21.35.10, and secured with a Google Trust Services SSL certificate. The domain was created on November 23, 2025, and remains unflagged in Google Safe Browsing (GSB) systems. No current blocklist entries have been identified, indicating a newly emerged but potentially high-impact threat.

The current status of spinchance.top is active with under investigation classification, meaning immediate threat levels remain unconfirmed but warrant heightened scrutiny. PhishDestroy recommends immediate domain blocking at network and endpoint levels due to crypto drainer characteristics and zero initial detection coverage. End users should treat all wallet connection prompts from this domain as high-risk and avoid interaction. Remaining risk is assessed as elevated given low detection rates and recent domain creation aligned with crypto phishing trends.