The domain spx10k-cointelegraph.com was registered through Ultahost, Inc. on July 28, 2026 and is presently resolving to the IPv4 address 192.142.10.5. Its authoritative name servers are dale.ns.cloudflare.com and savanna.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. The domain appears on two security blocklists and has been explicitly blocked by PhishDestroy and SEAL, confirming that multiple defensive platforms have identified it as a malicious resource.
VirusTotal analysis shows that 2 of 91 security vendors have flagged the domain, providing independent corroboration of its suspicious nature. The domain remains active as of the report date, July 31, 2026, and no evidence of takedown or remediation has been observed. Publicly available intelligence does not yet include details such as SSL certificate attributes, HTTP response codes, trust‑score metrics, page titles, or direct evidence links, leaving those aspects of the payload unverified.
Defenders should prioritize adding spx10k-cointelegraph.com to network and email filtering rules, monitor outbound connections to 192.142.10.5, and enforce DNS‑level blocking through existing threat‑intel feeds. Continuous re‑evaluation is advised, as additional indicators—such as content snapshots or credential‑harvesting pages—may emerge and further clarify the campaign’s objectives.