positivespin-discord[.]com

Analysis indicates that www.positivespin-discord.com is an active brand‑impersonation site targeting Discord users. The domain was registered on 2026-03-28 through Squarespace Domains II LLC and resolves to 198.185.159.144, an IP owned by Squarespace, Inc. in the United States. DNS resolution uses Google Cloud DNS name servers ns-cloud-d1.googledomains.com, ns-cloud-d2.googledomains.com and ns-cloud-d3.googledomains.com. The site presents an HTTP 302 redirect and serves a Let’s Encrypt R12 certificate, suggesting a legitimate‑looking TLS layer. The page title “Positive Spin Pole Dance” does not reference Discord, but the intelligence tags the domain as impersonating Discord and categorises the scam as crypto gambling. Gridinsoft assigns a trust score of 0/100, and two of ninety-one VirusTotal scanners have flagged the domain. It is already listed on one security blocklist and has been blocked by PhishDestroy. Current evidence does not reveal the exact payload or credential‑harvesting mechanisms, so the full attack vector remains uncertain. Defenders should block the domain at DNS and proxy layers, monitor outbound connections to the associated IP, and continue to observe any changes to the redirect target or content. Ongoing intelligence collection is recommended to determine whether the site hosts malicious binaries or phishing forms.