The domain spx55k-cointelegraph.com was registered on July 09, 2026 through Ultahost, Inc. and currently resolves to the IP address 188.114.97.3. The authoritative name servers are martin.ns.cloudflare.com and thea.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare's DNS infrastructure. The domain is listed on a single public blocklist and is actively blocked by PhishDestroy, confirming that at least one anti‑phishing service has observed malicious activity associated with it.
VirusTotal has recorded detections from three of ninety‑one scanned vendors, reinforcing the suspicion that the site is being used for abusive purposes. The threat intelligence source classifies the activity as generic phishing and assigns a high risk rating, with the operational status marked as active. No public information about the website’s content, page title, SSL certificate details, or HTTP response codes has been published, so the exact appearance and technical delivery mechanisms remain unknown.
The absence of additional blocklist listings or broader vendor consensus does not imply safety; rather, the existing indicators already satisfy the criteria for a high‑confidence malicious classification. Defenders should add spx55k-cointelegraph.com to deny‑list or block rules at network perimeter and endpoint protection layers, monitor DNS queries for the associated Cloudflare name servers, and consider sink‑holing the IP address 188.114.97.3 if feasible. Continuous re‑evaluation is recommended, as further analysis of the site’s payload or credential‑harvesting pages may reveal additional indicators of compromise.