sprinjpn[.]com

PhishDestroy identifies sprinjpn.com as a generic phishing domain currently under investigation for suspected crypto-draining activity. This domain does not impersonate a specific brand but exhibits behaviors consistent with unauthorized cryptocurrency fund extraction via deceptive transaction prompts. The infrastructure suggests a drainer kit deployment, though the precise payload remains unconfirmed due to low detection coverage.

This domain was flagged with a VirusTotal detection score of 0 out of 95 engines, indicating zero antivirus or security vendor coverage as of the latest scan. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolved to IP address 89.124.111.77, and holds a valid SSL certificate issued by Let's Encrypt. The domain was created on April 15, 2026, making it less than one month old at the time of analysis. It has not yet appeared on the Google Safe Browsing (GSB) blocklist and currently remains unlisted by any major threat intelligence feeds.

As of today, sprinjpn.com remains active and unblocked across major browsers and networks. PhishDestroy continues to monitor this domain under active investigation, with risk classification pending further behavioral analysis and payload extraction. Users are strongly advised to avoid interaction with this domain and to verify any similar domains using PhishDestroy's real-time threat lookup tool. While current risk is classified as 'under_investigation,' the absence of detections and recent creation date elevate the potential for escalation into a confirmed drainer campaign. Immediate domain blocking at the network or endpoint level is recommended to prevent potential financial loss.