MALICIOUS — CRITICAL
spx19k-cryptoslate[.]com
This domain, spx19k-cryptoslate.com, is under investigation as an active crypto-focused phishing site.
- VirusTotal
- 0/91
- Blocklists
- 2 · MetaMask, SEAL
- Disponibilità
- Contenuto non disponibile · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
spx19k-cryptoslate.com — Contenuto non disponibile (HTTP 502). Simulazione del marchio: Across; Tipo di truffa: Impersonation. Riepilogo delle prove: VirusTotal 0/91; URLQuery 1 alert; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 85/100. Registrar: Ultahost.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
spx19k-cryptoslate.com — Crypto Phishing Domain Investigation
This domain, spx19k-cryptoslate.com, is under investigation as an active crypto-focused phishing site.
This domain, spx19k-cryptoslate.com, is under investigation as an active crypto-focused phishing site. Registered on August 05, 2026, through Ultahost, Inc., the domain remains operational as of August 07, 2026, despite being flagged by three security blocklists and blocked by PhishDestroy, MetaMask, and SEAL. Infrastructure analysis reveals the domain resolves to the IP address 188.114.97.3 and uses Cloudflare nameservers (annalise.ns.cloudflare.com and donald.ns.cloudflare.com), a common tactic to obscure hosting details and evade takedowns.
While VirusTotal scans by 91 vendors returned no detections, this absence does not confirm safety, as phishing domains often evade initial detection through rapid rotation or obfuscation techniques. The domain’s recent creation and immediate appearance on blocklists suggest a deliberate attempt to impersonate or exploit the reputation of cryptocurrency-related platforms, though the exact content or targeted brand is not yet confirmed in available data.
Defenders should treat this domain as high-risk and prioritize monitoring or blocking based on its infrastructure indicators, including the IP and nameserver associations. Further analysis of HTTP headers, SSL certificates, or page content may provide additional context, but current evidence supports immediate mitigation actions.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati13 recorded checks
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | spx19k-cryptoslate.com |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Prove archiviate
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of spx19k-cryptoslate.com · checked Aug 7, 2026
Dati e relazioni esterneIndependent lookups and source reports
PD-20260807-EDA110 Recipient: u-abuse@ultahost.com Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.