spkflresdigitalconnect[.]xyz

Analysis conducted on July 23, 2026 shows that spkflresdigitalconnect.xyz is currently offline but displays numerous attributes of a high‑risk brand‑impersonation operation aimed at the cryptocurrency platform 1inch. The domain was registered on August 15, 2025 through Ultahost, Inc. and resolves to the IP address 35.207.83.131, which is assigned to AS15169 (Google LLC) and located in Germany. Hosting on a Google‑owned address suggests the infrastructure may be leveraging reputable cloud services to obscure malicious activity. The site presented a page title of "Connect" and used SiteGround name servers (ns1.siteground.net, ns2.siteground.net).

An SSL certificate was observed with an R10 rating, yet the Gridinsoft trust score is 0 out of 100, indicating a lack of confidence in the site's legitimacy. VirusTotal scans report 14 detections out of 93 security vendors, and the domain appears on five separate security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. AlienVault OTX lists the domain in one threat‑intelligence pulse, further corroborating its malicious reputation.

The campaign is classified as a crypto scam, and the domain explicitly impersonates the 1inch brand. Defenders should continue to block the domain across network and endpoint controls, monitor the associated IP address for any resurgence, and update URL filtering policies to include the identified hostnames and IP range. Given the low trust score and multiple vendor detections, any future resolution of the domain should be treated as hostile and subjected to immediate isolation.