flarefn-launch[.]live

Analysis indicates that the newly registered domain flarefn-launch.live resolves to the IPv4 address 188.114.96.3. The domain was created on July 23, 2026 and is currently registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. DNS resolution is served by Cloudflare nameservers jocelyn.ns.cloudflare.com and lee.ns.cloudflare.com, suggesting use of Cloudflare's CDN and DDoS mitigation services. The only visible artifact on the site is the page title “Flare — FLR Rewards Vote”, which aligns with a generic phishing classification.

The domain appears on a single security blocklist and has been added to the PhishDestroy blocklist, confirming that at least one trusted feed has identified it as malicious. VirusTotal records show that the site has been scanned by 91 antivirus and URL‑reputation engines; none of the engines raised a detection, but the absence of a match does not constitute a safety indication. No additional intelligence, such as SSL certificate details, HTTP response codes, or content analysis, is available at this time. Uncertainty remains around the specific phishing campaign mechanics, the targeted brand or credential type, and whether any payload is delivered beyond the landing page.

The short lifespan of the domain combined with rapid blocklisting suggests an opportunistic campaign that may be short‑lived. Defenders should proactively block the domain at the network perimeter and update any URL filtering or DNS sinkhole policies to include flarefn-launch.live. Monitoring of outbound traffic to the associated IP address 188.114.96.3 is advisable, as the host may serve additional malicious resources. Continuous re‑scanning through multi‑engine services such as VirusTotal is recommended to capture any future changes in the payload or classification.