Проверка домена flaremainnets-dapp.com на фишинг и безопасность

Analysis of flaremainnets-dapp.com shows a domain created on 15 August 2025 and hosted on Amazon AWS (AS16509) at IP 216.198.79.65. The server presents a HTTP 451 response, indicating restricted access, and uses a Let’s Encrypt R13 certificate, suggesting the site was served over HTTPS with HSTS enabled. DNS resolution points to Vercel infrastructure, as evidenced by the authoritative name servers ns1.vercel-dns.com and ns2.vercel-dns.com and the detection of Vercel technology. The page title returned by the live endpoint reads “Flare Network – The blockchain for data”, matching the declared scam type of a crypto‑related scam. The domain is registered through Tucows Domains Inc., a common registrar for short‑lived malicious sites.

Threat intelligence platforms have flagged the domain. Three of ninety‑five VirusTotal scanners reported malicious activity, and the domain appears on four independent security blocklists. It is currently listed as blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. The combination of a recent registration, Amazon hosting, Vercel front‑end, and a legitimate‑sounding blockchain‑related title aligns with known patterns used in crypto phishing campaigns. Uncertainty remains regarding the exact content delivered before the site was taken offline, as the analysis is based on the HTTP response and metadata.

No additional artifacts such as phishing page screenshots or credential‑capture forms have been observed. Defenders should continue to block the domain at network perimeter and update endpoint protection signatures with the reported indicators. Monitoring of the associated IP range (216.198.79.0/24) is advised, as the attacker may reuse the same AWS infrastructure for future campaigns. Victims should be warned that any unsolicited communication referencing Flare Network or requests for cryptocurrency transfers originating from this domain are likely fraudulent.