bonus-flare[.]app

The domain bonus-flare.app is actively involved in a phishing operation that targets users interested in FLR Rewards Vote. It is flagged by 4 out of 91 vendors on VirusTotal and listed on 3 public blocklists, including PhishDestroy, MetaMask, and SEAL. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and hosted on an IP associated with Cloudflare, Inc. in the United States.

The phishing site uses a page title that suggests it is related to Flare's FLR Rewards Vote, a strategy likely aimed at deceiving users into disclosing sensitive information. The SSL certificate is issued by Google Trust Services, which might lend an appearance of legitimacy to unsuspecting visitors. The domain's platform risk score is high at 83 out of 100, indicating a significant threat level.

Despite the active status and detection by several security entities, the domain continues to operate, leveraging its early registration to exploit users before comprehensive database updates by antivirus vendors. This highlights the importance of early detection systems like PhishDestroy, which can identify threats during their initial phase, reducing potential harm to users. The ongoing presence of bonus-flare.app on multiple blocklists underscores the need for continuous monitoring and rapid response to emerging phishing threats.