flarefndn-bonus[.]xyz

This domain, flarefndn-bonus.xyz, poses a specific threat as a brand impersonation phishing site targeting users of the Flare Network. It mimics the official Flare FLR Rewards Vote interface to deceive visitors into submitting sensitive information, such as wallet credentials or seed phrases, under the guise of voting for rewards. The site is currently active and may attempt to drain cryptocurrency wallets or steal authentication details.

Technical analysis provides concrete evidence of the threat. VirusTotal reports 0 detections out of 95 security vendors, indicating the domain has not yet been flagged by automated scanners. The domain was created on June 26, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for less stringent verification. It resolves to IP address 188.114.96.3, which is associated with Cloudflare's infrastructure, and uses an SSL certificate issued by Google Trust Services to appear legitimate. No blocklist entries were observed at the time of analysis, but the domain remains under active investigation.

Users who visited flarefndn-bonus.xyz should immediately disconnect from any connected wallets and revoke any permissions granted to the site. They should scan their devices for malware, change passwords for associated accounts, and enable two-factor authentication. Monitoring blockchain transactions for unauthorized activity is advised, and reporting the domain to relevant security authorities can help mitigate further risk.