splendidfinancial[.]xyz

Analysis indicates that the domain splendidfinancial.xyz, created on September 10 2024 and hosted on the IP address 198.187.29.22, is actively being used for a generic phishing campaign. The registrar listed is Namecheap Inc, and the authoritative name servers are dns1.namecheaphosting.com and dns2.namecheaphosting.com. VirusTotal reports that 11 of 91 security vendors have flagged the domain, demonstrating a moderate level of detection across multiple scanners.

The domain appears on a single external blocklist and is currently listed as blocked by the PhishDestroy service, confirming that at least one threat‑intelligence feed has recognized its malicious intent. The risk rating assigned by internal assessment is high, and the operational status remains active as of the report date, July 27 2026. Infrastructure analysis shows no additional evidence of SSL certificates, HTTP response codes, or page‑title metadata in the available data set; consequently, the exact content of the hosted page has not been publicly disclosed.

The limited visibility does not preclude the domain from being leveraged in credential‑harvesting attacks, and the presence of multiple vendor detections suggests that the site likely presents deceptive content designed to lure victims into submitting personal or financial information. Defenders should proactively add splendidfinancial.xyz to network‑level blocklists, enforce DNS filtering, and monitor outbound connections to the associated IP address. Continuous re‑scanning with multi‑vendor engines is advised to capture any changes in detection status, and security teams should correlate internal logs for any attempted connections to this domain to identify possible compromise attempts.