flarenetwork-mainnets[.]com

Analysis of flarenetwork-mainnets.com shows a high‑risk generic phishing campaign that is currently active. The site returns HTTP 200 and presents the page title “Flare — XRP Staking & DeFi Cover,” suggesting it attempts to masquerade as the Flare network service. VirusTotal scans have flagged the domain in 17 of 91 security engines, indicating substantial malicious interest. Infrastructure fingerprints include hosting on Netlify, enforced HSTS, and SSL certificates issued by Let’s Encrypt (E8). The domain was registered on 2026‑05‑02 through Tucows Domains Inc., uses Cloudflare nameservers (mariah.ns.cloudflare.com, roan.ns.cloudflare.com), and resolves to IP 75.2.60.5, an AWS Global Accelerator endpoint located in the United States. Reputation metrics are poor: Gridinsoft assigns a trust score of 0 / 100, and the domain appears on three blocklists, with explicit blocks from PhishDestroy, MetaMask, and SEAL. While the page content beyond the title has not been examined, the combination of recent registration, low‑trust score, and multiple security vendor detections strongly supports a phishing classification. Defenders should immediately block the domain at network and endpoint layers, monitor DNS queries for the associated IP and nameservers, and consider adding the domain to internal threat intel feeds. Ongoing observation is advised to detect any further payload delivery or credential‑harvesting activity.