sparkspike[.]world

The domain sparkspike.world has been identified as a confirmed phishing site targeting users of the Discord platform through brand impersonation. Analysis indicates the domain is currently offline, but prior activity involved presenting a fraudulent page titled 'Shade Network — The Private Execution Layer' to deceive victims into disclosing login credentials or authorizing malicious transactions. Infrastructure analysis reveals the domain was registered on October 15, 2025, through NameCheap, Inc., and resolved to the IP address 172.67.156.93. It appears on three security blocklists and is flagged by 4 of 95 security vendors on VirusTotal. The domain holds a Gridinsoft trust score of 0/100 and was blocked by multiple detection systems, including MetaMask and SEAL. Technical indicators show the use of Node.js, React, Next.js, Cloudflare, Webpack, and HTTP/3, suggesting a modern, obfuscated attack infrastructure with SSL certification issued by Google Trust Services. Current status confirms the domain has been taken offline, but residual risk remains for users who may have interacted with it prior to deactivation. Organizations are advised to block the domain and associated IP at the perimeter, revoke any session tokens or credentials potentially exposed through this site, and monitor for anomalous authentication attempts. End users should verify domain authenticity before entering sensitive information and report any suspicious activity to their security teams.