flarefoundation-allocations[.]live

This domain, flarefoundation-allocations.live, is flagged as an active phishing resource targeting cryptocurrency users under the pretense of Flare Foundation token allocations. Analysis indicates the site employs generic phishing tactics designed to harvest wallet credentials and private keys, likely through fraudulent claim portals or fake airdrop pages. No specific drainer kit signature has been confirmed, but the infrastructure aligns with common phishing frameworks used in recent crypto-themed campaigns. Infrastructure analysis reveals the domain was registered on July 05, 2024, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It currently resolves to the IP address 172.67.179.24, which is part of a network range known for hosting malicious content. Detection metrics show 10 out of 95 security vendors on VirusTotal have flagged the domain as malicious, while Google Safe Browsing status remains unlisted at the time of this report. No additional blocklist entries from major threat intelligence platforms have been recorded, though this may reflect a lag in propagation rather than benign status. The domain remains active and poses a high risk to users who may encounter it through phishing emails, social media links, or compromised advertisements. Response actions should include immediate blacklisting in enterprise security controls, DNS sinkholing where possible, and user education to recognize fraudulent allocation claims. Despite partial vendor detection, the domain's continued operation and plausible branding present an ongoing threat, particularly to individuals involved in cryptocurrency transactions. Users are advised to verify all token allocation claims through official Flare Foundation channels and avoid interacting with unsolicited links.