spx98k[.]com

Analysis of spx98k.com shows the domain was registered on July 16 2026 through Internet Domain Service BS Corp and is currently active. The domain resolves to IP 213.111.154.98 and uses Cloudflare DNS with nameservers gina.ns.cloudflare.com and randy.ns.cloudflare.com. It appears on one public blocklist and is listed by the PhishDestroy mitigation service, indicating prior identification as a phishing vector. VirusTotal records indicate the site has been scanned by 95 antivirus and URL‑reputation engines without any detections, but the absence of flags does not confirm benign intent. The rapid creation‑to‑deployment timeline, alignment with known phishing infrastructure patterns, and inclusion on a blocklist collectively suggest the domain is being used for generic phishing campaigns. No additional details about the landing page, targeted brand, or payload have been disclosed, leaving the exact phishing methodology uncertain. Defenders should block or sinkhole the IP address 213.111.154.98, monitor DNS queries for the two Cloudflare nameservers, and add spx98k.com to internal URL filtering lists. Continuous observation of the domain’s activity and periodic re‑scans with sandbox tools are recommended to capture any evolving malicious content.