spinco-adres[.]icu

Analysis indicates that the domain spinco-adres.icu was registered on July 20, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active. The domain resolves to the IP address 188.114.97.3, which belongs to Cloudflare’s network and is served by the authoritative nameservers dale.ns.cloudflare.com and phoenix.ns.cloudflare.com. Infrastructure traces show no additional hosting anomalies; the IP is shared among many unrelated sites, a common pattern for abuse operators leveraging reputable CDNs.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, confirming that external threat‑intelligence feeds have identified it as malicious. VirusTotal records indicate that the domain was scanned by ninety‑one anti‑malware vendors, none of which raised a detection at the time of analysis; this absence of alerts does not constitute evidence of benign behavior. The only publicly available classification is a generic phishing designation, with no further details on payload, targeted brand, or page content.

Consequently, the precise phishing vector, victim profile, and lure mechanisms remain uncertain. Defenders should continue to block spinco‑adres.icu at perimeter firewalls and DNS resolvers, monitor outbound connections to the associated Cloudflare IP, and incorporate the domain into threat‑intel feeds. Ongoing observation of any new detections, changes to DNS records, or appearance on additional blocklists is recommended to assess evolving risk.