Analysis of the domain sparkdex-dex.com indicates a recently registered phishing infrastructure under active investigation. The domain was created on July 23, 2026, and is currently resolving to the IP address 186.2.175.109. Infrastructure analysis reveals the domain is hosted on nameservers ares.trustname.com, ns1.anycastdns.cz, ns2.anycastdns.cz, and zeus.trustname.com, all associated with the registrar Fewmoretaps OU, operating under the trade name Trustname.com.
At the time of this report, the domain appears on one security blocklist, having been flagged by PhishDestroy, though no additional public threat intelligence sources have confirmed malicious activity. VirusTotal scans conducted by 91 security vendors returned no detections, though the absence of flags does not confirm the domain's safety. The domain remains active as of July 28, 2026, with no further details available regarding its specific content, targeted brand, or phishing methodology.
Defenders are advised to monitor network traffic for connections to 186.2.175.109 and the domain sparkdex-dex.com, particularly in environments where Trustname-hosted domains are uncommon. Given the domain's recent registration and limited detection coverage, additional scrutiny is warranted, including retrospective analysis of logs for prior connections. If observed, defenders should capture full HTTP transactions and submit samples to threat intelligence platforms for further classification.