flare-rewardclaim[.]com

flare-rewardclaim.com was first observed on October 10, 2025. The site presents the page title “Token Management | Flare”, indicating an attempt to lure cryptocurrency users. Infrastructure analysis shows the domain resolves to the IPv6 address 2a02:4780:45:fe21:63cb:941c:b6f2:e3a5, hosted in Germany under AS47583 owned by Hostinger International Limited. Registration was performed through HOSTINGER operations, UAB.

The SSL certificate is identified as R12, and the Gridinsoft trust score is 0 out of 100, reflecting a lack of trust. VirusTotal scans report four of ninety‑three security vendors flagging the domain, confirming malicious behavior. Four independent blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, have listed the domain, and it appears on four additional security blocklists. The threat is classified as a crypto drainer, and the risk level is elevated.

As of the report date, the domain is listed as offline, but historical activity suggests it was used to capture token credentials. Defenders should continue to block the domain at network perimeter, monitor for any residual traffic to the associated IPv6 address, and ensure endpoint protection solutions are updated to include the four vendor detections. Further investigation is recommended to locate any residual phishing pages or compromised accounts that may have been targeted while the site was active.