treasure-flare[.]network

This domain, treasure-flare.network, is confirmed as a crypto drainer phishing site designed to drain digital assets from victim wallets through malicious smart contract interactions. Analysis indicates the infrastructure mimics legitimate decentralized application interfaces to trick users into signing transactions that transfer funds to attacker-controlled addresses. No specific brand impersonation has been identified, but the domain employs common crypto-themed lures such as 'treasure' and 'flare' to appear credible. Infrastructure analysis reveals the domain was registered on May 10, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently resolves to IP address 104.21.16.51 (AS13335, Cloudflare, Inc.). Security vendors on VirusTotal flag this domain at 6/95, while it appears on three independent security blocklists. The SSL certificate is issued by Let's Encrypt (serial E8), and the domain remains unlisted in Google Safe Browsing at the time of this report. Additional protective measures have been implemented by at least three major security entities. The domain remains active as of this investigation, with no evidence of takedown or mitigation. Users are advised to treat all interactions with treasure-flare.network as malicious and to revoke any connected wallet permissions immediately. The remaining risk is classified as high due to the domain's operational status, Cloudflare-hosted infrastructure, and lack of widespread detection. Continuous monitoring is recommended to track potential shifts in hosting or certificate rotation.