spotrsvp[.]one

Analysis indicates that the domain spotrsvp.one is actively serving phishing content as of July 19, 2026. The domain resolves to the IP address 130.12.180.78, hosted by Virtualine Technologies in the Netherlands, and is protected by nameservers earl.ns.cloudflare.com and jule.ns.cloudflare.com, suggesting Cloudflare infrastructure. An SSL certificate issued by Let's Encrypt (YR1) is present, and the domain returns an HTTP 200 status, though the page title 'Just a moment...' is consistent with intermediate or cloaked content often used in phishing campaigns to evade detection. Security vendors have flagged this domain on three blocklists, including PhishDestroy, MetaMask, and SEAL. Five out of 91 security vendors on VirusTotal detect the domain as malicious. The domain was registered through NameSilo, LLC, though no specific registration date or brand impersonation details are available. The exact nature of the phishing content remains unconfirmed, as no brand target or scam type is specified in the available data. Defenders should treat this domain as high-risk and block it at the DNS or network level. Monitoring for connections to 130.12.180.78 and associated Cloudflare nameservers may help identify compromised systems. Further analysis of the site's content is required to determine the specific phishing campaign or targeted brand, if any.