spinwheel-proposals[.]com

PhishDestroy identifies spinwheel-proposals.com as an ACTIVE generic phishing domain currently under investigation by cybersecurity researchers. The landing page is styled as Spinwheel Proposal Manager, a plausible facade that lures victims into surrendering sensitive business proposal data or corporate credentials. Behavioural telemetry indicates the site remains live and continues to resolve to its host IP, making real-time vigilance essential. This domain was flagged by PhishDestroy on seed 55cb54. It resolves to IP 185.158.133.1 and is registered through Name.com, Inc. The SSL certificate is issued by Google Trust Services, a factor that may lower initial suspicion for some users. At the time of analysis, VirusTotal shows 0 detections out of 95 scanning engines, indicating the domain has not yet propagated to major blacklists. The domain was created on May 1, 2026—an unusually recent registration that correlates with fresh phishing campaigns. Despite the lack of AV coverage, the domain’s purpose is clear from its title and structure, warranting proactive defensive measures. To mitigate the specific threat posed by spinwheel-proposals.com, users should avoid interacting with the site entirely. If login credentials were accidentally entered, immediately reset passwords on all corporate and personal accounts using that email or username, enable multi-factor authentication where available, and report the incident to your security team. Administrators should block the domain at the DNS and firewall levels, flag the IP 185.158.133.1, and share IOCs with threat intelligence platforms to accelerate detection across the community. Monitor internal logs for repeated failed login attempts or data exfiltration patterns consistent with this campaign.