sparkdex-ai[.]xyz

Analysis of the domain sparkdex-ai.xyz indicates it is an active phishing site registered on July 20, 2026, through Unstoppable Domains Inc. The domain resolves to the IP address 186.2.175.103 and is currently flagged on one security blocklist, PhishDestroy, suggesting potential malicious intent. Infrastructure review reveals the domain uses nameservers ns1.unstoppabledomains.com and ns2.unstoppabledomains.com, consistent with the registrar's standard configuration. As of July 21, 2026, the domain has not been flagged by any of the 95 security vendors on VirusTotal, though this absence does not confirm its safety. The domain's name, incorporating 'dex'—a common abbreviation for decentralized exchange—implies a likely focus on cryptocurrency-related phishing, though the exact content and target brand remain unconfirmed due to limited technical analysis. Defenders are advised to monitor network traffic to 186.2.175.103 and consider blocking the domain at the perimeter, particularly in environments where cryptocurrency transactions occur. Further investigation is required to determine the specific phishing kit or payload in use, as well as any associated threat actor infrastructure. The domain remains active, and organizations should treat it as a potential risk until additional intelligence is available.