votingflarenetwork[.]xyz

This domain, votingflarenetwork.xyz, is flagged as an active phishing site targeting cryptocurrency holders through a fraudulent Flare Governance voting portal. Analysis indicates the site impersonates legitimate Flare Network governance interfaces, specifically luring users with a fabricated "Vote on the FLR Rewards Date" page title. The threat type is classified as generic phishing with a focus on credential harvesting, likely intended to drain FLR tokens from unsuspecting victims. No specific drainer kit signatures have been conclusively identified, but the domain exhibits characteristics consistent with wallet-draining phishing campaigns. Infrastructure analysis reveals the following technical indicators: the domain was registered on June 17, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently resolves to IP address 172.67.146.251. VirusTotal detection shows 6 out of 95 security vendors flagging the domain as malicious. The domain appears on three security blocklists and is actively blocked by multiple threat intelligence feeds, including PhishDestroy, MetaMask, and SEAL. No entries were found in Google Safe Browsing at the time of analysis, suggesting the campaign may still be evading some detection mechanisms. The domain remains active and poses an elevated risk to Flare Network users, particularly those participating in governance votes. Response actions include immediate blocking by security providers and ongoing monitoring for related infrastructure. Remaining risk stems from the domain's convincing mimicry of official Flare Governance portals, which may deceive users into entering wallet credentials or signing malicious transactions. Users are advised to verify domain authenticity through official Flare Network channels before interacting with any governance-related sites and to employ hardware wallets or isolated environments for sensitive operations.