reward-flare[.]app

This domain, reward-flare.app, operates as a crypto drainer phishing site designed to deceive users into connecting digital wallets to fraudulent reward interfaces. Analysis indicates the site employs social engineering tactics, such as fake airdrop or bonus offers, to trick victims into authorizing malicious smart contracts. Once connected, the site drains cryptocurrency assets from the victim's wallet without further interaction, exploiting vulnerabilities in wallet authorization processes.

Technical indicators confirm the domain's malicious nature. The site is flagged by 8 out of 95 security vendors on VirusTotal, with detections from multiple threat intelligence platforms. It appears on three security blocklists and is actively blocked by wallet security extensions. The domain was registered on June 05, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently resolves to IP address 188.114.96.3, hosted on Cloudflare infrastructure (AS13335). The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the threat, as the domain remains operational and actively serving phishing content.

Users who have interacted with reward-flare.app should immediately revoke any wallet authorizations granted to the site via their wallet's connected apps or dApp permissions. Disconnect the wallet from all suspicious sites and transfer remaining assets to a new, secure wallet address. Scan the device used for interaction with up-to-date security tools to detect potential malware. Monitor wallet transactions for unauthorized activity and report the incident to relevant blockchain security platforms for further analysis. Given the high-risk nature of crypto drainers, affected users should assume their credentials and private keys may be compromised.