allocation-flare[.]icu

This domain, allocation-flare.icu, operates as a fraudulent blockchain platform impersonating the legitimate Flare network. Analysis indicates it is designed to harvest cryptocurrency wallet credentials, private keys, and personal data from victims under the pretense of providing access to Flare's blockchain services. The page title, 'Flare: The blockchain for data,' closely mimics official branding to deceive users into interacting with malicious smart contract prompts or fake wallet integrations. Evidence confirms the domain's malicious nature through multiple technical indicators. VirusTotal reports 17 out of 95 security vendors flagging allocation-flare.icu as malicious. The domain was registered on April 24, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with suspicious registrations. Infrastructure analysis reveals it resolves to IP address 104.21.96.53 and appears on 3 security blocklists. Detected technologies include Proton Mail, Node.js, React, and Google Cloud, suggesting a sophisticated backend designed to evade detection while processing stolen data. Users who visited allocation-flare.icu should immediately revoke any connected wallet permissions and transfer assets to a new, secure wallet. Scan all devices used to access the site for malware, focusing on browser extensions and cryptocurrency-related applications. Reset passwords for any accounts accessed during the visit, particularly those linked to cryptocurrency exchanges or blockchain services. Monitor financial and identity-related accounts for unauthorized activity, and report the incident to relevant security teams or fraud reporting platforms for further mitigation.