flareclaim-evm[.]com

Analysis of flareclaim-evm.com confirms it as a high-risk crypto scam impersonating Coinbase, operational from September 7, 2025, until taken offline on or before July 23, 2026. The domain was registered through Global Domain Group LLC and resolved to 198.251.84.141 (AS53667 FranTech Solutions, US-based hosting). No SSL certificate was present, increasing the risk of unencrypted credential interception. The page title, 'Flare Network- EVM Hub for Web3.0,' suggests an attempt to mimic blockchain or cryptocurrency services, aligning with the reported scam type targeting crypto users.

Security vendor detection was limited but decisive: 12 of 95 engines on VirusTotal flagged the domain as malicious. Gridinsoft assigned a trust score of 0/100, and the domain appeared on five security blocklists, including PhishDestroy, ScamSniffer, and Polkadot. Google Safe Browsing classified it as social engineering, a designation consistent with phishing or fraudulent investment schemes. Nameservers (ns3.asurahosting.com, ns3.my-control-panel.com, ns4.asurahosting.com, ns4.my-control-panel.com) indicate shared or low-cost hosting infrastructure, which is commonly abused for malicious campaigns.

Defenders should treat this domain as confirmed malicious. Block all resolutions to 198.251.84.141 and monitor for related domains registered through the same registrar or nameserver infrastructure. Given the absence of SSL and the domain's offline status, retrospective log analysis should focus on HTTP traffic to this IP and domain during its active period. No evidence links this domain to a specific phishing kit or additional payloads, so further investigation into associated malware or follow-on infrastructure is recommended.