spax70p-fxempire[.]com

PhishDestroy identifies spax70p-fxempire.com as a suspected malvertising domain currently under investigation for phishing-related activities. The domain poses an active risk through deceptive online advertisements that redirect users to fraudulent investment schemes, likely targeting financial credentials or cryptocurrency deposits. This domain was flagged with zero detections across 95 VirusTotal scan engines, while resolving to IP 104.21.25.52 and operating under Cloudflare’s infrastructure with a Google Trust Services SSL certificate. Registered on May 09, 2026, the domain currently remains unlisted on major threat intelligence blocklists, indicating a newly emerged and potentially expanding campaign. Users should avoid interacting with any advertisements or links associated with spax70p-fxempire.com and report suspicious encounters to their security teams. Network defenders are advised to block the domain and IP at the firewall level and monitor for related C2 traffic. Given the absence of detections, assume compromise risk remains high until further analysis is complete.