bafybeiabrmiy7cfbxbljqfxfreo6e2dwfticwlhmaeq4bzu6rx7neznrrq[.]ipfs[.]dweb[.]link

This domain operates as a brand impersonation threat targeting users of the Flare Network by mimicking the SparkDEX decentralized exchange platform. The site presents itself as a legitimate trading interface under the title 'SparkDEX - Best DEX on Flare Network | Flare Dex Trading Platform,' but is designed to facilitate cryptocurrency investment scams. Visitors are likely to encounter fraudulent investment schemes, fake token sales, or wallet-draining mechanisms intended to siphon funds under the guise of a trusted platform.

Analysis indicates the domain was registered on April 30, 2026, through CSC Corporate Domains, Inc., and resolves to the IP address 209.94.90.3. Security vendors have flagged the domain with 10 detections out of 95 on VirusTotal, while it appears on three distinct security blocklists. The SSL certificate is issued by Let's Encrypt, a common tactic to lend superficial legitimacy to malicious infrastructure. Additional indicators include blocking by MetaMask, PhishDestroy, and SEAL, further confirming its association with fraudulent activity.

Users who accessed this domain should immediately cease all interactions and disconnect any connected wallets. Any credentials, seed phrases, or private keys entered on the site must be considered compromised and should be revoked. Affected individuals should audit their wallets for unauthorized transactions, revoke permissions for suspicious smart contracts, and monitor for signs of further exploitation. If funds were transferred, report the incident to relevant blockchain analytics services and local cybercrime authorities for potential tracing and recovery efforts.