app-flareclaim-voting[.]web[.]app

app-flareclaim-voting.web.app is currently active and returns HTTP 200 responses. The site was registered on May 11, 2026 through Google Firebase and resolves to the Google‑owned IP 199.36.158.100 located in the United States. The TLS certificate is issued by Google Trust Services under the WR4 series, indicating standard Google hosting. The page title observed is "Flare | Bridge Your XRP to DeFi", and the domain is flagged as brand impersonation targeting the Flare project. Gridinsoft assigns a trust score of 0/100, and three of ninety‑two VirusTotal scanners have flagged the domain as malicious. The domain appears on three security blocklists and is already blocked by PhishDestroy, MetaMask, and SEAL. Despite these indicators, the content of the site beyond the title has not been publicly analysed, leaving the exact phishing mechanism uncertain. Defenders should add the fully qualified domain name to network‑level deny lists, enforce DNS filtering, and monitor for any traffic to the associated IP address. Continuous re‑evaluation is advised as additional telemetry becomes available.