spx80k-centurylink[.]com

Analysis of the domain spx80k-centurylink.com indicates it is an active phishing site registered on July 20, 2026, through NameSilo, LLC. The domain resolves to the IP address 45.141.59.78 and uses Cloudflare nameservers (brynne.ns.cloudflare.com and clark.ns.cloudflare.com). As of July 21, 2026, the domain remains active and has been flagged by one security vendor on VirusTotal out of 95 scanned, while appearing on one security blocklist. The specific threat classification is generic phishing, with no confirmed brand impersonation or scam subtype identified in available data. The domain's infrastructure, including Cloudflare hosting and recent registration, aligns with common phishing tactics to evade detection and maintain anonymity. Defenders should treat this domain as high-risk and block it at the DNS or network level. Further investigation into the resolved IP (45.141.59.78) may reveal additional associated malicious domains. No HTTP status, SSL certificate details, or page content analysis are currently available, limiting confirmation of the exact phishing lure or target. Monitoring for changes in detection status or additional blocklist appearances is recommended.