apexpay[.]pro[.]sparkpay[.]pro

The domain apexpay.pro.sparkpay.pro is a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform 'base'. It operated as a cryptocurrency scam, presenting itself as 'Apexpay Bank' to deceive victims into disclosing sensitive information or transferring funds. No drainer kit was identified. The site is currently taken offline, but its prior activity poses an elevated risk to those who may have interacted with it.

Technical indicators confirm the malicious nature of apexpay.pro.sparkpay.pro. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. It appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was created on February 21, 2026, and resolved to the IP address 198.251.89.220, hosted by FranTech Solutions (AS53667) in the US. The SSL certificate was issued by R11, and the observed page title was 'Apexpay Bank'. Registrar details are not available.

Individuals who visited apexpay.pro.sparkpay.pro should take immediate safety steps. If cryptocurrency transactions were attempted, revoke any token approvals and transfer remaining funds to a new, secure wallet. For credential or login phishing, change passwords on all affected accounts and enable two-factor authentication. Monitor accounts for unauthorized activity and report the incident to relevant platforms, such as the impersonated brand's support team and cybersecurity organizations like the Anti-Phishing Working Group (APWG) or local authorities.