spx98k[.]icu

Analysis indicates that the domain spx98k.icu was registered on 18 July 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IPv4 address 172.67.130.136. The domain is currently active and continues to resolve to the same address. Public scanning services have recorded that the domain was submitted to VirusTotal where 95 security vendors evaluated the host and none reported a detection at the time of analysis; however, the absence of detections does not constitute a safety assurance. The classification of the infrastructure as a generic phishing site derives from its inclusion in the threat feed under the generic_phishing label. No additional attributes such as associated malware kits, compromised credentials, or targeted brands have been disclosed. Consequently, the operational purpose of the site remains uncertain beyond the generic phishing designation. Defenders should consider blocking DNS resolution to 172.67.130.136 and adding spx98k.icu to URL filtering policies. Monitoring of DNS queries and outbound traffic for connections to the domain is recommended, as is periodic re‑scanning with multiple analysis engines to detect potential changes in behavior. Given the recent registration date, the domain may be part of a fast‑flux or short‑lived phishing campaign; continuous threat‑intel correlation is advised to identify any emerging indicators of compromise.