spc-renewals[.]com

The domain spc-renewals.com was registered on April 23 2026 through Fewmoretaps OU d/b/a Trustname.com. The registration date places the site within the current threat landscape and aligns with the observed high‑risk classification. The domain resolves to the IP address 104.21.76.13, which belongs to Cloudflare, Inc. and is geolocated to Canada. The use of a reputable CDN suggests an attempt to obscure the true hosting infrastructure.

Network traffic to the domain is served over HTTPS using a Let’s Encrypt certificate identified as “YE2”. The web server returns an HTTP 301 redirect, directing visitors to a page whose title reads “Sharjah Publishing City: Business Setup in the UAE | SPC Free Zone”. This title mimics a legitimate business‑setup service, indicating a credential‑harvesting lure aimed at users seeking UAE company formation services.

Threat intelligence shows the domain appears on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis reports two of ninety‑five security vendors flagging the site, while Gridinsoft assigns a trust score of 0 out of 100. AlienVault OTX references the domain in eight separate threat pulses, reinforcing the view that the infrastructure is being monitored by multiple analysts. The combination of a low trust score, blocklist presence, and multiple OTX mentions justifies the high‑risk rating.

Defenders should add spc-renewals.com to outbound filtering rules and block the associated IP 104.21.76.13 at the network perimeter. Monitoring for DNS queries to the domain can provide early warning of infection attempts. Security teams are advised to incorporate the observed TLS fingerprint and HTTP 301 behavior into detection signatures, and to share the indicator set with peer organizations to improve collective remediation.