theflaredropclaim[.]com

On July 23, 2026, the domain theflaredropclaim.com was identified as a high-risk wallet/seed phishing domain impersonating the 1inch brand. The domain was registered through Dynadot LLC on October 14, 2025, and currently resolves to the IP address 162.210.70.175, which is located in the United States under the ASN AS46606 Unified Layer. The domain does not possess an SSL certificate, which is a common indicator of a lack of security and potential malicious intent. Analysis indicates that the domain's nameservers are ns1.md-96.webhostbox.net and ns2.md-96.webhostbox.net.

This domain is flagged by several security vendors, with 13 out of 95 vendors on VirusTotal marking it as suspicious. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trustworthiness. Additionally, the domain appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, further reinforcing its malicious nature. The page title found on the domain is 'Flare is the blockchain for data,' which does not align with the 1inch brand and suggests that the site may be misleading.

The exact content of the site is not yet fully analyzed, but the combination of the high-risk scam type, the impersonation of a well-known brand, and the lack of security measures makes it highly likely that the domain is being used for malicious purposes. Defenders should take immediate action to block this domain in their network environments and educate users about the risks of wallet/seed phishing. Given the domain's current offline status, it may have been taken down by security measures or the registrar, but it remains a potential threat if it reappears. Regular monitoring and updates to blocklists are recommended to ensure continued protection against this and similar threats.