screencex[.]com

Analysis of the domain screencex.com indicates that it is being leveraged in a generic phishing operation. The domain was registered on May 03, 2026 through Internet Domain Service BS Corp. and is hosted on the IP address 176.123.1.28, which resolves via Cloudflare nameservers coleman.ns.cloudflare.com and deb.ns.cloudflare.com. VirusTotal records show that the domain has been scanned by 91 security vendors, none of which reported a detection; however, the lack of detections does not constitute confirmation of benign intent.

The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, confirming that at least one external threat‑intelligence feed has flagged it as malicious. No additional public intelligence such as Safe Browsing alerts, OTX mentions, SSL certificate details, HTTP response codes, trust‑score metrics, page titles, or evidence links are currently available. The current operational status is listed as active and the risk level is marked as under investigation, suggesting that the infrastructure may still be in use.

Defenders should treat screencex.com as a potential phishing vector: block the domain at network perimeter devices, include it in URL filtering policies, monitor DNS queries for the associated IP address, and continue to watch for any new detections from reputable vendors. Ongoing collection of network traffic and host‑based indicators is recommended to capture any future payloads or credential‑harvesting activity that may be delivered through this domain.