# PhishDestroy domain threat record: community-flarenetwork.lol

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/community-flarenetwork.lol/
Machine-readable companion: https://phishdestroy.io/domain/community-flarenetwork.lol/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: not observed active
- First observed by PhishDestroy: 2026-09-29 04:39:55 UTC
- Last availability or vendor check: 2026-10-23 01:31:34 UTC
- Stored record updated: 2026-10-23 18:21:04 UTC
- VirusTotal detections in the stored snapshot: 1/91
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: flarenetwork

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: Eranet International Limited
- Registrar country in stored WHOIS data: Unknown
- Registration date (registry RDAP, community-flarenetwork.lol): 2026-09-27 20:21:59 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a0eb7f-82bd-7599-9bfc-9e09f1127416/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/community-flarenetwork.lol
- Certificate Transparency search: https://crt.sh/?q=%25.community-flarenetwork.lol
- Web Archive lookup: https://web.archive.org/web/*/https://community-flarenetwork.lol/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
community-flarenetwork.lol is a phishing page that impersonated Flare Network, the blockchain project, under a domain dressed up as an official community portal. It targeted Flare users and wallet holders who expected an official hub. PhishDestroy first flagged it on 2026-09-29. The site has been offline since 2026-09-30 and was still dead when last checked on 2026-10-19.

How the scam works
The page carried Flare's own tagline as its title, "Flare: The blockchain for data," so a visitor arriving from a social post or direct message would see a familiar brand rather than a warning sign. Impersonation pages like this usually present a fake community reward, airdrop, migration or wallet-validation step. They then push the visitor to connect a wallet and sign transactions, or to type in a recovery phrase. Either path can hand control of the victim's tokens to the operator, and the loss is typically immediate and irreversible.

Evidence
urlscan.io rated the page malicious and recognized Flare Network branding on it. Wallet-focused blocklists picked it up quickly: MetaMask and SEAL both list the domain, alongside PhishDestroy. VirusTotal coverage was thin, with only CRDF flagging it out of 91 engines on 2026-09-29. A generic URL scanner alone would have passed this site as clean. Three AlienVault OTX threat pulses also reference the domain.

Infrastructure
The domain was registered through Eranet International Limited on 2026-09-27, just two days before PhishDestroy detected it, and it went dark a day after that. This short lifespan is typical of disposable phishing domains. The site sat behind Cloudflare's network, geolocated to Canada, which hides the actual origin server. It used a free Let's Encrypt certificate, so the browser padlock showed only that the connection was encrypted, not that the site belonged to Flare.

What to do
If you connected a wallet to this site, use a token-approval checker to revoke any permissions you granted, and move your remaining assets if you signed anything you did not fully understand. If you entered a seed phrase, treat that wallet as compromised. Create a new wallet on a clean device and transfer whatever is left right away. Remember that Flare will never ask for a recovery phrase. Security teams should block the domain and watch for lookalike "community" or "claim" domains abusing the Flare name, since operators often re-register under new names once one is taken down.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0eb7f-82bd-7599-9bfc-9e09f1127416/
VirusTotal report: https://www.virustotal.com/gui/domain/community-flarenetwork.lol
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=community-flarenetwork.lol
Archived copy: https://web.archive.org/web/20260929044212/https://community-flarenetwork.lol/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-19 10:15:15 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/qY2chRyB/3ad33c8cded5.png
  Captured: 2026-09-29 04:51:27 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a0eb7f-82bd-7599-9bfc-9e09f1127416.png
  Captured: 2026-09-29 04:51:27 UTC
  Source report: https://urlscan.io/result/01a0eb7f-82bd-7599-9bfc-9e09f1127416/
- URLScan capture 2: https://urlscan.io/screenshots/01a0e8ba-2417-73cd-aec1-cd9159b3e23a.png
  Captured: 2026-09-29 04:39:55 UTC
  Source report: https://urlscan.io/result/01a0eb7f-82bd-7599-9bfc-9e09f1127416/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/7fc42373-5126-46e2-a989-096f373ebfc5.png
  Captured: 2026-09-29 04:42:34 UTC
  Source report: https://radar.cloudflare.com/scan/7fc42373-5126-46e2-a989-096f373ebfc5
  SHA-256: da91a0f69504103488fe0d28f8b1f7438a4d40166a1d92786bc917476ca3796f
- URLQuery: https://screenshots.phishdestroy.io/uq/d48f2f43-e869-408a-99a8-945f72a6e3e4.png
  Source report: https://urlquery.net/report/d48f2f43-e869-408a-99a8-945f72a6e3e4
  SHA-256: d07b2ebd5def75f52192147e77b3c02f007710fde3f25fae1114faf3c9d90e60
- URLScan · 2026-09-28: https://screenshots.phishdestroy.io/us/01a0e8ba-278b-7288-a410-195dc8c33a8e.png
  Captured: 2026-09-28 15:55:16 UTC
  Source report: https://urlscan.io/result/01a0e8ba-278b-7288-a410-195dc8c33a8e/
  SHA-256: 4ba1ff20ac8a3de7be423a2a55c7b9eb1fdf5eed3aaaba1dddcfb55e4684e373
- URLScan · 2026-09-28: https://screenshots.phishdestroy.io/us/01a0e8ba-2417-73cd-aec1-cd9159b3e23a.png
  Captured: 2026-09-28 15:55:27 UTC
  Source report: https://urlscan.io/result/01a0e8ba-2417-73cd-aec1-cd9159b3e23a/
  SHA-256: 4ba1ff20ac8a3de7be423a2a55c7b9eb1fdf5eed3aaaba1dddcfb55e4684e373
- URLScan · 2026-09-29: https://screenshots.phishdestroy.io/us/01a0eb86-283d-768b-bb60-0146b1a71a3e.png
  Captured: 2026-09-29 04:57:21 UTC
  Source report: https://urlscan.io/result/01a0eb86-283d-768b-bb60-0146b1a71a3e/
  SHA-256: 4ba1ff20ac8a3de7be423a2a55c7b9eb1fdf5eed3aaaba1dddcfb55e4684e373

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-20T22:17:56Z",
        "uuid": "01a0eb7f-82bd-7599-9bfc-9e09f1127416",
        "scanned_at": "2026-09-29T04:50:04Z",
        "final_url": "https://community-flarenetwork.lol/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://community-flarenetwork.lol/",
                "from": "http://community-flarenetwork.lol/",
                "status": 307
            }
        ],
        "ip": "188.114.96.3",
        "domains": [
            "gateway.irys.xyz",
            "fonts.gstatic.com",
            "esm.sh",
            "arbitrum.meowrpc.com",
            "arbitrum.gateway.tenderly.co",
            "arbitrum.drpc.org",
            "rpc.ankr.com",
            "arbitrum-one.publicnode.com",
            "arb1.arbitrum.io",
            "5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com",
            "hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com",
            "7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com",
            "abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com",
            "l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com",
            "crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com",
            "y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com",
            "rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com",
            "4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com",
            "qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com",
            "7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com",
            "b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com",
            "muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com",
            "3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com",
            "el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com",
            "tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com",
            "h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com",
            "fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com",
            "qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com",
            "lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com",
            "ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com"
        ],
        "ips": [
            "142.251.13.94",
            "104.21.15.158",
            "172.67.163.26",
            "172.66.167.42",
            "142.251.110.95",
            "172.67.74.152",
            "104.26.15.209",
            "104.17.208.5",
            "104.21.17.203",
            "104.26.11.181",
            "35.227.193.242",
            "104.18.10.59",
            "152.236.9.75",
            "104.20.24.117",
            "104.20.39.96"
        ],
        "asns": [
            "15169",
            "13335",
            "396982",
            "396356"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "link_domains": [
            "www.cookieyes.com",
            "flare.network",
            "portal.flare.network",
            "merch.flare.network",
            "dev.flare.network",
            "flarescan.com",
            "flare-explorer.flare.network",
            "flare-systems-explorer.flare.network",
            "xrpfi.flare.network",
            "twitter.com",
            "t.me",
            "drive.google.com",
            "github.com",
            "www.youtube.com",
            "www.linkedin.com",
            "discord.com",
            "medium.com",
            "forum.flare.network"
        ],
        "social": [
            "https://twitter.com/FlareNetworks",
            "https://t.me/FlareNetwork",
            "https://github.com/flare-foundation",
            "https://www.youtube.com/c/Flare_Networks",
            "https://discord.com/invite/flarenetwork",
            "https://medium.com/flarenetwork"
        ],
        "doc_hash": "77b6956913eda205759111ae1d13cf7793ae9c5b72e6869ced362140649cee88",
        "script_hashes": [
            "b9838c97850bf4f463727cf5458d53d0940b4d93564ac40803b320518c79c38c"
        ],
        "globals": [
            "requestResize",
            "__earlyClickAction",
            "__removeEarlyClick",
            "Cap",
            "downloadLogsBlobInBrowser"
        ],
        "cookies": [
            "PHPSESSID"
        ],
        "tls": {
            "san": [
                "*.community-flarenetwork.lol",
                "community-flarenetwork.lol"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "community-flarenetwork.lol",
            "protocol": "QUIC",
            "valid_to": "2026-12-26T19:28:18Z",
            "valid_from": "2026-09-27T19:28:19Z"
        },
        "domain_age_days": 1,
        "apex_age_days": 1,
        "tls_age_days": 1,
        "tls_valid_days": 89,
        "requests": 164,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "flarenetwork"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Flare"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-20T21:03:36Z",
        "uuid": "7fc42373-5126-46e2-a989-096f373ebfc5",
        "scanned_at": "2026-09-29T04:42:34Z",
        "final_url": "https://community-flarenetwork.lol/",
        "status": 200,
        "history": [
            {
                "url": "https://community-flarenetwork.lol/",
                "status": 200
            }
        ],
        "dom_hash": "744c77dfcffbf0004d31dbe5b7460d65292616a5e242a95f1bb9e4082b3baf6f",
        "doc_hash": "7c73366db38c35426966fbdad6f227a37e08dd80d361c75b21ccf71e7d08f1bc",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Phishing"
        ],
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "Phishing",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "community-flarenetwork.lol",
                "type": "A",
                "value": "104.21.85.19"
            },
            {
                "name": "community-flarenetwork.lol",
                "type": "A",
                "value": "172.67.201.6"
            },
            {
                "name": "community-flarenetwork.lol",
                "type": "AAAA",
                "value": "2606:4700:3035::6815:5513"
            },
            {
                "name": "community-flarenetwork.lol",
                "type": "AAAA",
                "value": "2606:4700:3037::ac43:c906"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.85.19",
        "verdict": {
            "tags": [
                "phishing"
            ],
            "malicious": true,
            "categories": [
                "phishing"
            ]
        },
        "whois": {
            "registrar": "Eranet International Limited",
            "created": "2026-09-27T20:21:59Z",
            "updated": "2026-09-27T20:22:00Z",
            "expires": "2027-09-27T23:59:59Z",
            "nameservers": [
                "elijah.ns.cloudflare.com",
                "stephane.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T16:43:36Z",
        "analysis_at": "2026-10-17T13:52:47Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "registrar": "Eranet International Limited",
        "created": "2026-09-27T20:21:59Z",
        "expires": "2027-09-27T23:59:59Z",
        "updated": "2026-09-27T20:22:00Z",
        "first_seen": "2026-09-28T06:40:35Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.201.6"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "elijah.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "elijah.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::ac43:c906"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3035::6815:5513"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.85.19"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "stephane.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-09-29T17:01:24Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.community-flarenetwork.lol",
                "community-flarenetwork.lol"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "6235c48904088d8bb26d7036c936aea8237",
            "sha256": "d6e67a9f2cff1fcbc49fb4feec9e497400e4ea76fda28f337e160538e546b7b5",
            "subject": "community-flarenetwork.lol",
            "valid_to": "2026-12-26T19:28:18Z",
            "valid_from": "2026-09-27T19:28:19Z"
        },
        "whois": {
            "registrar": "Eranet International Limited",
            "registrar_iana_id": "1868",
            "registrar_url": "http://www.eranet.com",
            "created": "2026-09-27T20:21:59Z",
            "updated": "2026-09-27T20:22:00Z",
            "expires": "2027-09-27T23:59:59Z",
            "status": [
                "addPeriod",
                "clientTransferProhibited",
                "serverTransferProhibited"
            ],
            "nameservers": [
                "elijah.ns.cloudflare.com",
                "stephane.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        }
    }
}
```