fassets-flare[.]foundation

This domain, fassets-flare.foundation, is flagged as a high-risk generic phishing threat and remains active as of July 12, 2026. It was registered on May 14, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, and its infrastructure relies on Cloudflare for hosting and nameservers (jeff.ns.cloudflare.com and ulla.ns.cloudflare.com), resolving to IP address 172.67.217.37 located in Canada. The SSL certificate is issued by Let's Encrypt (E7). The site returns an HTTP 403 status with a page title of 'Just a moment...', indicating it may use Cloudflare's challenge page to obscure actual content. Threat intelligence sources show the domain appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal reports 1 detection out of 92 security vendors, and AlienVault OTX identifies it in one threat intelligence pulse. The exact phishing scheme or brand targeted is not yet determined from available data, as the page content is not fully accessible. Defenders should block the domain at the DNS and email gateway levels, monitor for related subdomains or variations, and report it to relevant threat-sharing platforms. The low detection rate suggests the domain may be newly operational or using evasion techniques.