spark[.]fi-app-connect-v2-wallets[.]online

The domain spark.fi-app-connect-v2-wallets.online is a phishing site engaged in brand impersonation targeting MetaMask users. It presents itself as a cryptocurrency platform, specifically mimicking the Spark stablecoin earning interface, to deceive victims into disclosing wallet credentials or sensitive information. No drainer kit was identified, but the site operates as a cryptocurrency scam. As of the latest verification, spark.fi-app-connect-v2-wallets.online has been taken offline.

Technical indicators confirm the elevated risk level. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Trustwave, and appears on 1 security blocklist (PhishDestroy). It was registered on August 04, 2025, through Web Commerce Communications Limited dba WebNic.cc. The site resolved to the IPv6 address 2606:4700:3030::6815:5001, hosted by Cloudflare, Inc. in the US (AS13335). The SSL certificate was issued by WE1, and the observed page title was 'Spark: Earn on your stablecoins'. Google Safe Browsing did not flag the domain, and Gridinsoft assigned a trust score of 0/100.

Victims of spark.fi-app-connect-v2-wallets.online should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. Enable two-factor authentication on all cryptocurrency and financial accounts. Report the phishing domain to MetaMask’s official abuse channels, as well as to platforms like PhishTank or the Anti-Phishing Working Group. Monitor accounts for unauthorized transactions and consider freezing credit if personal data was exposed.