sparkdex-apps[.]com

This domain, sparkdex-apps.com, is identified as a cryptocurrency phishing site designed to harvest wallet credentials and private keys. Analysis indicates the domain presents a fraudulent interface mimicking legitimate decentralized exchange platforms, tricking users into exposing sensitive authentication details. The threat specifically targets cryptocurrency holders through social engineering tactics, including fake login prompts and transaction verification requests, which are common in wallet-draining schemes. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain is flagged by 6 out of 95 security vendors on VirusTotal, appears on 3 distinct security blocklists, and is blocked by at least three major browser-based security extensions. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 26, 2026, the domain resolves to the IP address 172.67.136.55, which is associated with Cloudflare’s network. The page title 'Just a moment...' suggests the use of anti-bot mechanisms or proxy-based redirection, a technique frequently employed to evade automated detection systems. Additionally, the domain’s trust score is rated 0/100, reinforcing its malicious classification. Users who visited sparkdex-apps.com should immediately revoke any connected wallet permissions and transfer assets to a new, secure wallet. All credentials entered on the site must be considered compromised and should be changed across all platforms where they were reused. It is recommended to scan the device for malware, as phishing sites often deploy secondary payloads. If transactions were initiated, users should review blockchain records for unauthorized transfers and report the incident to relevant financial and cybersecurity authorities. Monitoring for unusual account activity is advised for at least 30 days following exposure.