sparkfilabs[.]info

This domain is flagged as a credential harvesting phishing site targeting users through deceptive login portals. Analysis indicates it was designed to mimic legitimate authentication pages, tricking visitors into submitting sensitive information such as usernames, passwords, and multi-factor authentication codes. The infrastructure was likely used in targeted campaigns against financial services, cryptocurrency platforms, or corporate email systems, given its high-risk classification and rapid inclusion in security blocklists. Infrastructure analysis reveals the domain was registered on April 04, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious registrations. It resolves to the IP address 104.21.77.10, a Cloudflare-hosted endpoint commonly exploited to obfuscate origin servers. The domain appears on 3 security blocklists and is flagged by 15 out of 95 security vendors on VirusTotal, with detections including phishing, fraudulent login pages, and credential theft. AlienVault OTX records it in one threat intelligence pulse, further corroborating its malicious intent. Additional technical indicators include its immediate blocking by MetaMask, PhishDestroy, and SEAL, all of which specialize in detecting financial and authentication-based phishing threats. Users who visited sparkfilabs.info should assume their credentials were compromised and take immediate remediation steps. First, revoke any active sessions tied to the affected account and reset passwords using a secure, unrelated device. Enable multi-factor authentication if not already active, and monitor linked accounts for unauthorized transactions or login attempts. If financial or cryptocurrency credentials were entered, contact the respective institution to freeze accounts and initiate fraud investigations. Additionally, scan the device used to access the domain for malware, as phishing sites often deploy secondary payloads. Report the incident to internal security teams or relevant CERT organizations to aid in broader threat mitigation efforts.