solspark[.]net

solspark.net is a domain registered through PDR Ltd. d/b/a PublicDomainRegistry.com on 14 November 2025. The domain resolves to the IPv4 address 158.94.208.165, which is advertised as belonging to AS202412 Omegatech LTD in Germany. DNS resolution is provided by the Cloudflare nameservers dimitris.ns.cloudflare.com and khloe.ns.cloudflare.com. No TLS certificate is present for the host, and an HTTP request returns the title “404 Not Found”. The site is currently listed as offline.

Threat intelligence indicates that the domain has been classified as a crypto‑scam phishing vector. It appears on one security blocklist and has been explicitly blocked by the PhishDestroy feed. VirusTotal analysis shows that six of ninety‑five scanning engines flagged the domain, reinforcing the malicious assessment. Independent scoring from Gridinsoft assigns a trust score of 0 out of 100, suggesting a lack of legitimate reputation. The available evidence confirms the presence of malicious infrastructure but provides limited insight into the payload or victim interaction, as the landing page is not reachable and no SSL/TLS layer is employed.

Consequently, the exact phishing kit or lure content cannot be verified at this time. Defenders should treat solspark.net as hostile. Immediate actions include adding the domain and its resolving IP address to network‑level blocklists, updating endpoint and web‑proxy filters, and monitoring for any future DNS changes or re‑hosting attempts. Because the domain uses Cloudflare nameservers, any re‑deployment may retain the same authoritative NS records, so alerts should be configured on DNS queries for the domain. Continuous observation of the AS202412 block for new malicious domains is also recommended.