# Phishing sites impersonating Spark PhishDestroy has recorded 38 phishing domains impersonating Spark since 2025-09-20, 13 of them in the last 30 days. The most used registrars are Dynadot and NiceNIC; the most common TLDs are .shop and .com. Open Spark only from its official app or a saved bookmark. 38Domains, all time 13Last 30 days 18Online at last check 1Confirmed takedowns ## New domains in the last 90 days Spark phishing domains detected per day: 16 from 2026-07-25 to 2026-10-22; peak 3. ## How to tell a fake Spark site Words most often added to the brand in reported domains: finance, labs, apy, peachstudio, revspark, play, netseora, dapp, browser, restore. - Type the address yourself or use a bookmark; phishing links for Spark arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Spark will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Spark phishing domains The 38 most recently detected domains impersonating Spark Domain | First detected | Status at last check | Registrar | [bonbonswedenstore.shop](https://phishdestroy.io/domain/bonbonswedenstore.shop/) | 2026-10-22 | Online | — | [airtwt.org](https://phishdestroy.io/domain/airtwt.org/) | 2026-10-21 | Online | Cloudflare | [boldcurrent.shop](https://phishdestroy.io/domain/boldcurrent.shop/) | 2026-10-20 | Offline | Dynadot | [sparkunioncapital.net](https://phishdestroy.io/domain/sparkunioncapital.net/) | 2026-10-20 | Online | GoDaddy.com | [bobbiejoyco.shop](https://phishdestroy.io/domain/bobbiejoyco.shop/) | 2026-10-20 | Offline | Dynadot | [bmwgear.shop](https://phishdestroy.io/domain/bmwgear.shop/) | 2026-10-18 | Online | Dynadot | [beautifulearthboutiquenatural.shop](https://phishdestroy.io/domain/beautifulearthboutiquenatural.shop/) | 2026-10-12 | Online | Dynadot | [beataheumanroom.shop](https://phishdestroy.io/domain/beataheumanroom.shop/) | 2026-10-11 | Online | Dynadot | [balviliving.shop](https://phishdestroy.io/domain/balviliving.shop/) | 2026-10-10 | Online | Dynadot | [bakedbymelissafood.shop](https://phishdestroy.io/domain/bakedbymelissafood.shop/) | 2026-10-10 | Online | Dynadot | [ashvail.shop](https://phishdestroy.io/domain/ashvail.shop/) | 2026-10-04 | Online | Dynadot | [archiemcpheehq.shop](https://phishdestroy.io/domain/archiemcpheehq.shop/) | 2026-10-04 | Online | Dynadot | [aquamarise.shop](https://phishdestroy.io/domain/aquamarise.shop/) | 2026-10-04 | Offline | Dynadot | [acotoy.shop](https://phishdestroy.io/domain/acotoy.shop/) | 2026-09-09 | Online | Dynadot | [abnstore.shop](https://phishdestroy.io/domain/abnstore.shop/) | 2026-09-09 | Online | Dynadot | [spark-online.online](https://phishdestroy.io/domain/spark-online.online/) | 2026-08-02 | Offline | Registrar of Domain Names REG.RU | [porndepfile.com](https://phishdestroy.io/domain/porndepfile.com/) | 2026-04-28 | Online | Trustname.com | [xolonetwork.net](https://phishdestroy.io/domain/xolonetwork.net/) | 2026-04-08 | Unknown | NICENIC | [jurassic-spark.pages.dev](https://phishdestroy.io/domain/jurassic-spark.pages.dev/) | 2026-03-30 | Online | Cloudflare | [xolo.network](https://phishdestroy.io/domain/xolo.network/) | 2026-03-28 | Unknown | NICENIC | [rcelo-software.github.io](https://phishdestroy.io/domain/rcelo-software.github.io/) | 2026-03-13 | Online | GitHub | [spark-pulse.digital](https://phishdestroy.io/domain/spark-pulse.digital/) | 2026-03-04 | Online | Dynadot | [spark.fi-dappv3-wailet-world.com](https://phishdestroy.io/domain/spark.fi-dappv3-wailet-world.com/) | 2026-02-26 | Offline | — | [spark-app.world](https://phishdestroy.io/domain/spark-app.world/) | 2026-02-26 | Offline | — | [spark.fi-app-v3-wallet-connect.com](https://phishdestroy.io/domain/spark.fi-app-v3-wallet-connect.com/) | 2026-02-26 | Offline | — | [sparkdex-ai.com](https://phishdestroy.io/domain/sparkdex-ai.com/) | 2026-02-26 | Offline | — | [sparkfi.us](https://phishdestroy.io/domain/sparkfi.us/) | 2026-02-26 | Offline | — | [dappthat.com](https://phishdestroy.io/domain/dappthat.com/) | 2026-02-07 | Online | NameCheap | [enroll-brevis.network](https://phishdestroy.io/domain/enroll-brevis.network/) | 2026-01-07 | Unknown | NiceNIC | [spark-phase3.live](https://phishdestroy.io/domain/spark-phase3.live/) | 2026-01-05 | Offline | NameSilo | [dapp-browser-restore.xyz](https://phishdestroy.io/domain/dapp-browser-restore.xyz/) | 2025-12-28 | Offline | Web Commerce Communications | [netseora.click](https://phishdestroy.io/domain/netseora.click/) | 2025-12-26 | Offline | Regery.com | [spark-play.top](https://phishdestroy.io/domain/spark-play.top/) | 2025-12-16 | Offline | NameSilo | [revspark.us](https://phishdestroy.io/domain/revspark.us/) | 2025-12-14 | Taken down | GoDaddy.com | [peachstudio.fun](https://phishdestroy.io/domain/peachstudio.fun/) | 2025-11-21 | Offline | HOSTINGER operations | [labs-apy.com](https://phishdestroy.io/domain/labs-apy.com/) | 2025-10-17 | Unknown | NiceNIC | [app.spark-finance.net](https://phishdestroy.io/domain/app.spark-finance.net/) | 2025-10-13 | Offline | Tucows Domains | [app-spark.live](https://phishdestroy.io/domain/app-spark.live/) | 2025-09-20 | Offline | OwnRegistrar | [All 38 Spark reports](https://phishdestroy.io/domain/?brand=Spark) ## Where they are registered and hosted ### Registrars - [Dynadot](https://phishdestroy.io/registrar/dynadot/)12 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)2 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)2 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)2 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)2 - Cloudflare2 - [OwnRegistrar](https://phishdestroy.io/registrar/ownregistrar/)1 - [Tucows Domains](https://phishdestroy.io/registrar/tucows/)1 ### Top-level domains - [.shop](https://phishdestroy.io/tld/shop/)13 - [.com](https://phishdestroy.io/tld/com/)6 - [.net](https://phishdestroy.io/tld/net/)3 - [.live](https://phishdestroy.io/tld/live/)2 - [.us](https://phishdestroy.io/tld/us/)2 - [.network](https://phishdestroy.io/tld/network/)2 - [.fun](https://phishdestroy.io/tld/fun/)1 - [.top](https://phishdestroy.io/tld/top/)1 ### Hosting networks - CLOUDFLARENET, US10 - malakmadze Malakmadze Web LLC, GE6 - Malakmadze Web LLC6 - Cloudflare, Inc.3 - AS-COLOCROSSING, US2 - CLOUDFLARENET - Cloudflare, Inc., US2 - IQWeb FZ-LLC2 - AMAZON-02, US1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Spark; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/spark/