spaceurnex[.]info

The domain spaceurnex.info has been identified as a credential theft phishing site. This domain does not impersonate a specific brand but is designed to capture user credentials, potentially leading to unauthorized access to personal and financial accounts.

Analysis indicates that the domain is flagged by 11 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection within the security community. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 188.114.96.3. It was created on March 27, 2026, and is currently listed in one security blocklist. This domain has been taken offline, as noted in the current status, which helps mitigate the immediate threat.

Despite being taken offline, the domain spaceurnex.info remains a concern due to its elevated risk level. Organizations and individuals should ensure that their security systems are updated to block this domain and that users are trained to recognize and avoid phishing attempts. The remaining risk is primarily related to potential residual infections or the reactivation of the domain by threat actors. Continuous monitoring and proactive security measures are recommended to safeguard against future threats.