Is spark-dex.xyz a scam? TrustSniffer's high-risk assessment: 18/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

SparkDEX, served from the spark-dex.xyz domain, is a single-page landing site for a decentralized exchange on the Flare network. It tells visitors it is the "#1 DEX on Flare" and promotes a perpetuals trading competition paying up to 250K rFLR in weekly rewards. It also advertises 1–2 second transactions, $0.01 fees and $11.36B in "liquid finance", with "Register now" and "Launch App" calls to action. The apparent business model is revenue from user trading activity, with a token-incentive campaign used to draw participants into the application.

Scam/Impersonation Risk

Contradictory signals are present and drive the cautionary posture of this report. The domain is blacklisted by external reputation sources, and several independent security engines flag it as malicious or suspicious. One of them is a tier-one vendor. No brand impersonation, conflicting legal identities or credential-harvesting form was detected, so the concern rests on the external detections and not on a demonstrated clone of a specific brand. The commercial pitch compounds the concern. A domain only days old claims category leadership ("#1 DEX on Flare") and a very large liquidity figure. It also dangles up to 250K rFLR in weekly rewards, while the page offers no audit, contract address or fee schedule to support these claims. Round-number superlatives and reward campaigns on an unaudited landing page are the pattern commonly used to push users toward wallet connection and token approvals. The connection between this domain and any established SparkDEX operation is unverified. An independent route to the real project is needed before the "Launch App" path is trusted. Evidence:

• Homepage: promotes the perpetuals competition, the "#1 DEX" claim and the $11.36B liquidity figure with no audit, legal entity or contract reference.
• External reputation: multiple security engines classify the domain as malicious or suspicious, and a confirmed blacklist hit is recorded.
• Domain provenance: registered 2026-10-07 (~0.03 years old, about 12 days).
• Web archive: only 3 snapshots, spanning 2026-10-09 to 2026-10-12 (1 year tracked), which gives no established history to offset the detections.

Regulatory Verification Notes

The site is a landing page with no legal, terms, privacy or about pages. It names no operating company, jurisdiction, licence or registration, and it claims no regulatory status. No third-party broker or regulatory match was found for the domain. Operating a trading venue with leveraged-style perpetuals and token rewards normally calls for clear disclosure of the operator, risk terms and fee model. The page offers none of these. This is a verification gap, not proof of wrongdoing, but here it sits alongside confirmed external detections. The domain was registered through NameSilo, and its transport encryption is an entry-level domain-validated certificate. That confirms only that the connection is encrypted, not who operates the site. Evidence:

• Homepage: no company name, licence, terms of service or risk disclosure in the visible content.
• Site structure: no internal pages or outbound links to a legal or documentation hub, and no social-media references were found.
• Registration: domain registered via NameSilo, LLC, with expiry set to 2027-10-07.
• Transport security: TLS certificate issued by YE2 (DV), valid to 2027-01-05.

What to Verify Next

The domain's relationship to the real SparkDEX project should be established independently of this site. That means reaching the project's official channels from a source known to be genuine, such as a previously bookmarked address or an announcement on a verified social account, and confirming that this exact domain is listed there. Any contract address, audit report and fee schedule should be taken from those official sources and checked on the Flare block explorer before any wallet interaction. The rFLR competition should be confirmed through the project's official announcements, not through this page. No wallet should be connected and no token approval signed until the domain is confirmed as official. Evidence:

• Homepage: the rFLR campaign and liquidity figure have no linked documentation to check against.
• Homepage: the "Launch App" and "Register now" paths give no stated destination or contract details.
• Reputation findings: the current detections would need to be cleared or explained by the operator before any engagement.

Summary Verdict

The overall posture is high-risk. Confirmed external detections, an extremely young domain and an unverified connection to any real-world operator outweigh the modest technical hygiene the site shows. The content reads like a plausible DeFi exchange, but plausibility is not corroboration. At most, the site is suitable for passive viewing, not for any sensitive or financial interaction.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN/WAF, and all four observed addresses are edge servers. The origin server was not observable, so the real hosting location cannot be confirmed independently. Edge-only visibility also makes rapid content swaps harder to detect. Cloudflare is a mainstream provider and the shared address ranges carry no abuse history, which is a mitigating factor. It cannot offset the reputation findings, and protective infrastructure does not indicate legitimacy. Evidence:

• Hosting: served from AS13335 (Cloudflare, Inc., US), with 4 edge IPs observed and no origin candidates.
• Behavioural testing: 3 of 3 sandbox runs loaded successfully with stable HTTP 200 responses and no external posts, console errors or wallet-drainer behaviour.

Closing Assessment

The site should be treated as read-only at most. No login, credential entry, wallet connection, token approval or deposit should be attempted through this domain. Anyone seeking the real SparkDEX service should reach it only through officially published channels.