spark-pulse[.]digital

On July 24, 2026, the domain spark-pulse.digital was observed hosting a brand-impersonation page titled “Spark Pulse Academy – IT & IoT Training from Brazil”. The site was registered on March 04, 2026 through Dynadot LLC and uses Cloudflare nameservers aida.ns.cloudflare.com and wells.ns.cloudflare.com. DNS resolution points to 172.67.130.252, an address owned by AS13335 Cloudflare, Inc. in the United States. The TLS certificate is issued by Let’s Encrypt (E7) and the service supports HTTP/3, indicating a modern Cloudflare front-end.

Reputation testing shows a Gridinsoft trust score of 0 out of 100 and the domain appears on three independent blocklists, including PhishDestroy, MetaMask, and SEAL. VirusTotal scanned the host and six of ninety-four security engines flagged it as malicious. The overall risk rating is elevated and the campaign is currently offline.

While the page title suggests an educational offering, no further content analysis is available, and the exact phishing kit or credential-collection mechanism has not been disclosed. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re-activation of the address, and add the IP and associated AS to threat-intel feeds. Additional scrutiny of any traffic that attempts to resolve to the Cloudflare IP range associated with this domain is recommended, as well as updating endpoint security signatures to reflect the six VirusTotal detections.