sprinjp[.]com

This domain is flagged as a credential harvesting phishing site targeting financial services, specifically mimicking Eastspring Investments. The threat classification is elevated due to confirmed malicious intent and infrastructure patterns consistent with large-scale credential theft operations. Analysis indicates the domain was actively used to deceive users into disclosing sensitive login credentials, likely through a cloned investment portal interface. Infrastructure analysis reveals multiple high-risk indicators. The domain sprinjp.com was registered on April 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with abusive registrations. It resolves to IP address 77.238.225.208, which has been linked to prior phishing campaigns. Security vendors on VirusTotal flagged the domain with 4 out of 95 detections, indicating moderate but clear malicious recognition. The site was blocked by PhishDestroy and appears on one security blocklist. The trust score from Gridinsoft is 0 out of 100, reflecting no legitimate reputation. Technologies detected include Vue.js for frontend interactivity, Nginx as the web server, and HSTS implementation, which may have been used to lend false credibility to the phishing page. To mitigate risks associated with this credential harvesting threat, organizations should immediately block the domain and its resolving IP at the network perimeter. Security teams are advised to conduct a retrospective analysis of network logs for connections to 77.238.225.208 or sprinjp.com between April 28 and the takedown date. End-user training should emphasize verification of domain authenticity, especially for financial services portals, and the risks of entering credentials on newly registered domains. Multi-factor authentication should be enforced across all investment and financial platforms to reduce the impact of credential compromise. Monitoring for similar domain registrations using the same registrar or IP range is recommended to detect potential follow-up campaigns.