proposal-flarenetworks[.]com

This domain, proposal-flarenetworks.com, is identified as a high-risk credential phishing site targeting users of the Flare blockchain network. The page title, 'Flare: The blockchain for data,' mimics legitimate Flare Network branding to deceive visitors into entering sensitive account credentials, private keys, or wallet recovery phrases. The attack appears designed to exploit users seeking Flare-related services or airdrops, redirecting them to fraudulent interfaces that harvest authentication details for unauthorized access to cryptocurrency wallets or blockchain accounts. Analysis indicates the domain exhibits multiple technical indicators of malicious activity. It is flagged by 13 out of 95 security vendors on VirusTotal, and appears on four independent security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 28, 2026—an anomalous future date suggesting possible manipulation of WHOIS records to evade detection. Infrastructure analysis reveals the site resolves to IP address 104.21.91.111 and employs Cloudflare services, including Cloudflare Browser Insights and HTTP/3, likely to mask server origin and enhance evasion of automated security scans. Users who visited proposal-flarenetworks.com should take immediate action to mitigate risk. Disconnect any active sessions and cease all interaction with the site. If credentials, private keys, or recovery phrases were entered, affected accounts should be considered compromised. Users are advised to transfer assets to a new, secure wallet and revoke any connected dApp permissions associated with the exposed credentials. Monitor linked accounts for unauthorized transactions and enable multi-factor authentication where available. Additionally, report the incident to relevant platform security teams and consider submitting the domain to threat intelligence feeds to support broader detection efforts.