flaer-network[.]eth[.]limo

This domain operates as a crypto drainer phishing site targeting users of the Flare DAO blockchain project. The site presents itself as an official Flare DAO portal with the page title 'Flare DAO: The blockchain for data,' designed to trick users into connecting cryptocurrency wallets. Once connected, the site executes unauthorized transactions, draining funds from victims' wallets without consent. The threat specifically exploits trust in decentralized finance platforms and leverages IPFS hosting to evade traditional takedown mechanisms.

Analysis indicates the domain flaer-network.eth.limo was registered on April 30, 2026, through Tucows Domains Inc., an unusual registrar choice for legitimate blockchain projects. The domain resolves to IP address 3.135.72.151 and appears on 3 distinct security blocklists. VirusTotal detection shows 12 out of 95 security vendors flagging the domain as malicious, with additional blocking by multiple wallet security providers. The site employed HTTP/3 and HSTS protocols, likely to appear more legitimate to technical users, while using a PhishDestroy SSL certificate that further confirms its fraudulent nature.

Users who visited flaer-network.eth.limo should immediately disconnect any connected wallets from the site and revoke all smart contract approvals. All cryptocurrency assets should be transferred to a new wallet address, and any transactions initiated through this domain should be reviewed for unauthorized activity. Monitor wallet addresses for unexpected token approvals or outgoing transactions. Given the high-risk nature of this crypto drainer, affected users should consider their entire wallet compromised and take appropriate security measures across all connected services.