sparkdex-ai[.]org

This domain is flagged as a cryptocurrency decentralized exchange (DEX) phishing site targeting users of the Flare network. Analysis indicates the domain impersonates legitimate DEX platforms by offering fake swap and perpetual trading services, likely to harvest wallet credentials, private keys, or trick users into executing malicious smart contracts. The page title, SparkDEX | SparkDex AI DEX on Flare - Swap & Perps, directly mimics authentic trading interfaces, increasing the likelihood of successful social engineering attacks against cryptocurrency holders. Infrastructure analysis reveals multiple technical indicators supporting the phishing classification. The domain was registered on February 21, 2026, through Netdorm, Inc. dba DnsExit.com, a registrar frequently associated with high-risk registrations. It resolves to IP address 104.21.36.109 and is proxied behind Cloudflare, a common tactic to obscure hosting origins. Security vendors have flagged the domain on VirusTotal, with 3 out of 95 engines detecting malicious activity. Additionally, the domain appears on three independent security blocklists and is actively blocked by multiple wallet security extensions. Users who visited sparkdex-ai.org should assume their wallet credentials or transaction data may have been compromised. Immediate action is required: revoke any smart contract approvals granted to unknown addresses, transfer assets to a new wallet, and monitor transaction history for unauthorized activity. If private keys or seed phrases were entered, consider all associated wallets permanently compromised. Update security software and enable real-time phishing protection to prevent further exposure. No legitimate trading platform operates under this domain.