flare-9ed7e60ab7a5069ce-voting[.]web[.]app

This domain, flare-9ed7e60ab7a5069ce-voting.web.app, is actively impersonating the Flare blockchain network, as indicated by its page title 'Flare: The blockchain for data' and confirmed brand target. Infrastructure analysis reveals the domain was registered on May 11, 2026, through Google LLC and currently resolves to 199.36.158.100, a US-based IP associated with Google LLC. The site employs Firebase hosting, Vue.js, HSTS, Google Tag Manager, and HTTP/3, suggesting a modern web stack likely used to enhance credibility. The domain is flagged by 13 security vendors on VirusTotal and appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, indicating broad detection as malicious. The SSL certificate is issued by Google Trust Services (WR4), which is consistent with legitimate domains but does not mitigate the impersonation risk. Nameservers are not found, which may indicate an attempt to obscure ownership or hosting details. Defenders should treat this domain as high-risk brand impersonation, block access at the network level, and monitor for related domains using similar Firebase subdomain patterns or Flare-themed page titles. While the exact content and functionality of the site remain unanalyzed, the combination of brand impersonation, blocklist presence, and modern infrastructure warrants immediate containment.