spx49k-fxempire[.]com

Analysis as of July 21, 2026 indicates that spx49k-fxempire.com was registered on July 19, 2026 via Ultahost, Inc. The domain resolves to the IPv4 address 160.119.69.13 and is served by four nameservers: dayana.ns.cloudflare.com, ns3.ultahost.com, ns4.ultahost.com, and sonny.ns.cloudflare.c. A VirusTotal assessment performed on the domain involved 95 scanning engines; none reported a detection at the time of analysis. The domain is presently listed on a single external security blocklist and has been actively blocked by the PhishDestroy mitigation service. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or brand targeting has been published, limiting the ability to characterize the exact phishing payload or victim lure. The limited evidence set nevertheless satisfies the criteria for a generic phishing classification, and the domain’s recent creation date combined with active status suggests ongoing malicious use. Defenders should add the domain and its associated IP address to deny‑list rules, enforce DNS sink‑hole redirects, and monitor traffic for connections to 160.119.69.13. Continuous re‑scanning with threat‑intelligence platforms is recommended to capture any future detections that may arise as the site evolves. Until further content analysis is available, the domain should be treated as hostile and blocked at network perimeters.