spx15k-fxempire[.]com

The domain spx15k-fxempire.com is currently classified as a generic phishing site and remains active as of the report date, August 03, 2026. Infrastructure analysis shows that the domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing feed has identified it as malicious. VirusTotal records reveal that the domain was scanned by 91 independent security vendors; none of those scanners raised a detection at the time of analysis.

While the absence of vendor detections might suggest a low immediate detection footprint, it does not constitute evidence of benign behavior, especially given the domain’s inclusion on a blocklist and its designation as a phishing resource. The available intelligence does not disclose registrar details, hosting IP addresses, ASN information, SSL certificate status, or HTTP response codes, leaving those aspects of the infrastructure unverified. Consequently, the confidence in the full scope of the threat infrastructure is limited to the blocklist presence and the anti‑phishing block by PhishDestroy.

Defenders should prioritize adding spx15k-fxempire.com to local and network‑level deny lists, enforce outbound filtering for traffic to the domain, and monitor DNS query logs for any inadvertent resolutions. Continuous re‑evaluation is advised, as additional detections or blocklist entries may emerge, and the risk level remains under investigation. Organizations employing email security gateways should ensure that messages containing links to this domain are quarantined or rejected, and users should be educated to avoid interaction with unsolicited communications that reference the domain.