Analysis of spacenexarglobal.com indicates that the domain was registered on July 17, 2026 through Ultahost, Inc. and is currently resolved to the IPv4 address 159.100.6.5. The authoritative name servers listed for the domain are ns1.ultahost.com, ns2.ultahost.com, ns3.ultahost.com, and ns4.ultahost.com, all of which are operated by the same registrar. VirusTotal records show that the domain has been examined by 91 scanning vendors, and none of those engines reported a detection at the time of the latest scan.
The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy mitigation service. Its threat classification is recorded as generic phishing, and the risk level is marked as under investigation while the operational status remains active. The available data provide concrete evidence of recent registration, hosting infrastructure, and blocklist inclusion, but they do not reveal any payload characteristics, SSL certificate details, HTTP response codes, or page content such as title or brand targeting.
Consequently, the precise phishing vector, victim profile, and any associated malicious payload remain uncertain. Defenders should continue to monitor the domain for changes in detection status, add the IP address 159.100.6.5 to network‑level deny lists, and ensure that outbound traffic to this host is blocked where feasible. Organizations using web filtering should keep the domain on blocklists and consider sharing any newly observed indicators of compromise with threat‑sharing communities to improve collective visibility.