flarenetworks-votes[.]xyz

This domain, flarenetworks-votes.xyz, presents a targeted crypto drainer threat impersonating Flare Network’s governance voting system. The site displays a fraudulent "Flare Governance: Vote on the FLR Rewards Date" page, designed to trick users into connecting wallets and authorizing malicious transactions. Once connected, the site likely executes unauthorized token transfers or smart contract interactions, draining assets from victims’ wallets without consent. The attack exploits the trust associated with legitimate governance participation, a tactic increasingly observed in decentralized finance (DeFi) ecosystems. Analysis of the domain reveals multiple indicators of malicious infrastructure. The domain was registered on June 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to IP address 188.114.96.3 and is flagged by 3 out of 95 security vendors on VirusTotal, including detections from MetaMask, PhishDestroy, and SEAL. The domain appears on three security blocklists and has been documented in two AlienVault OTX threat intelligence pulses. Infrastructure analysis further identifies Cloudflare and HTTP/3 usage, which are often leveraged to obfuscate hosting origins and evade detection. Users who visited flarenetworks-votes.xyz should assume their wallet interactions were compromised. Immediate actions include revoking all recent smart contract approvals via a trusted blockchain explorer, transferring remaining assets to a new wallet address, and monitoring transaction histories for unauthorized activity. If credentials or private keys were entered, affected wallets should be considered permanently compromised. Additionally, users are advised to report the domain to relevant threat intelligence platforms to assist in broader detection efforts. Given the elevated risk level and offline status, this domain may reappear under a different name, warranting heightened vigilance for similar impersonation attempts.