spx88k-centurylink[.]com

The domain spx88k-centurylink.com was registered on July 06, 2026 through Ultahost, Inc. and is currently resolved to the IP address 172.67.172.143. The authoritative name servers are delilah.ns.cloudflare.com and mark.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare's edge network. VirusTotal records show that the domain has been examined by 91 scanning engines; none of the engines reported a malicious classification, but the absence of detections does not constitute a safety guarantee.

The domain appears on a single external security blocklist and has been explicitly blocked by the PhishDestroy filtering service, suggesting that at least one security vendor has identified it as a phishing vector. No public SSL certificate details, HTTP status codes, Safe Browsing verdicts, Open Threat Exchange (OTX) indicators, or page title information are presently available. The limited intelligence points to a newly created infrastructure that is actively serving content, as indicated by its "active" status on July 30, 2026.

Defenders should treat the domain as potentially hostile and consider adding it to internal URL filtering rules, monitoring DNS queries for the associated IP, and employing sinkholing or traffic redirection where feasible. Continuous re‑evaluation is advised, especially if future scans reveal malicious payloads or if additional threat‑intel sources publish corroborating evidence.