spx80k-fxempire[.]com

The domain spx80k-fxempire.com is assessed as a confirmed phishing site based on its recent registration, infrastructure characteristics, and placement on a security blocklist. The domain was created on July 20, 2026, just two days prior to the report date of July 22, 2026, which is a common pattern for malicious domains used in short-lived campaigns. It is registered through NameSilo, LLC, a registrar frequently associated with low-cost, high-volume domain registrations that can be abused for phishing. The domain resolves to IP address 192.142.10.5, which should be investigated further for any associated malicious activity.

Its nameservers are brynne.ns.cloudflare.com and clark.ns.cloudflare.com, indicating use of Cloudflare's DNS services. The domain appears on one security blocklist, specifically PhishDestroy, which has flagged it as a phishing threat. VirusTotal scanned the domain with 95 vendors; as of the report date, zero vendors currently flag it. However, this lack of detection is not proof of safety, as detection coverage can lag behind newly registered domains.

The exact content hosted on the domain has not been analyzed, and no brand target, scam type, or page title is available in the supplied intelligence. Defenders should block the domain and associated IP address at network and email security layers, monitor for any certificate issuance, and report it to NameSilo for potential suspension. Given the domain's age and blocklist status, it should be treated as an active threat until further investigation confirms its specific phishing lure.