sporkdex[.]com

This domain is flagged for brand impersonation targeting Google, presenting a high-risk phishing vector. The site replicates Google’s interface and page title, potentially tricking users into disclosing credentials or sensitive information. Analysis indicates the domain is designed to deceive visitors into believing they are interacting with a legitimate Google service, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals the domain was registered on April 28, 2026, through Global Domain Group LLC, a registrar frequently associated with suspicious domains. Despite its recent creation, the domain has already been added to four security blocklists, including MetaMask, PhishDestroy, SEAL, and Maltrail. VirusTotal reports 0 detections out of 95 engines, suggesting the threat is either new or employs evasion techniques. The domain resolves to IP address 104.21.74.147 and uses a Let’s Encrypt SSL certificate, which does not validate legitimacy. Technologies detected include reCAPTCHA and HTTP/3, further mimicking authentic Google infrastructure. If you or your organization have visited sporkdex.com, immediate action is required. Disconnect the device from the network to prevent potential data exfiltration. Reset any credentials entered on the site, particularly Google account passwords, and enable multi-factor authentication where available. Scan the device for malware using updated security tools, focusing on browser extensions or scripts that may have been installed. Monitor financial and account activity for unauthorized transactions or changes. Report the domain to internal security teams or relevant authorities to aid in broader threat mitigation efforts.