spint[.]live

Analysis of the domain spint.live shows it is actively registered through NameCheap, Inc. and was created on June 16, 2026. The domain resolves to the IPv4 address 178.16.54.156 and uses the authoritative nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. The domain appears on a single public security blocklist and is currently listed by the PhishDestroy blocklist, indicating that at least one anti‑phishing service has identified it as malicious.

VirusTotal records indicate the domain has been scanned by 91 security vendors; at the time of the scan no vendor flag was raised, but the absence of detections is not evidence of benign behavior and should be treated as inconclusive. No additional intelligence such as Safe Browsing status, OTX references, SSL certificate details, HTTP response codes, page title, or content signatures is available, leaving the exact phishing payload and targeted brand unknown. Given the recent registration date, the active hosting IP, and the presence on a phishing‑specific blocklist, defenders should treat spint.live as a high‑confidence indicator of phishing infrastructure.

Recommended actions include adding the domain and its resolving IP to network deny lists, monitoring DNS queries for related subdomains, and continuing to probe the site for payloads or credential‑stealing pages. Continuous re‑scanning with multi‑vendor services is advised to capture any future changes in detection status. Organizations employing web filtering should ensure that spint.live is blocked at the proxy level, and threat‑intel teams should correlate any observed login attempts or credential submissions with this indicator to identify potential compromise attempts.