Analysis of the domain spx21k-coinpwire.com indicates it is an active phishing threat targeting cryptocurrency users. Registered on July 15, 2026, through Ultahost, Inc., the domain remains operational as of July 30, 2026. It resolves to the IP address 188.114.96.3, hosted on Cloudflare infrastructure, with nameservers dayana.ns.cloudflare.com and sonny.ns.cloudflare.com. This hosting choice is common among phishing operators due to Cloudflare's privacy and security features, which can obscure malicious activity.
The domain is flagged by two security vendors on VirusTotal, though the specific detection labels are not provided. It appears on at least one security blocklist and is actively blocked by PhishDestroy. No further details regarding the page content, phishing kit, or targeted brand are available in the current intelligence. The lack of additional context—such as Safe Browsing status, SSL certificate details, or HTTP response codes—limits a full technical assessment, but the available indicators confirm its classification as a high-risk phishing domain.
Defenders should treat this domain as malicious and implement blocking at the DNS or network level. Monitoring for related infrastructure, such as the IP address 188.114.96.3 or additional domains using the same nameservers, may help identify further threats. Given the domain's recent registration and active status, continued vigilance is recommended, particularly for organizations handling cryptocurrency transactions or user credentials.