treasury-flarefndn[.]live

The domain treasury-flarefndn.live is currently classified as a high-risk generic phishing site. The landing page impersonates the Flare brand, using the title 'Flare — FLR Rewards Vote,' which is likely intended to deceive users into providing sensitive information or cryptocurrency wallet credentials. There is no evidence of a specific drainer kit, but the site structure and theming closely mimic legitimate Flare-related services, increasing the potential for user compromise.

Technical investigation confirms several notable indicators: VirusTotal reports 4 out of 95 security vendors detect this domain as malicious, suggesting early identification by threat intelligence systems. The domain was registered on July 05, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, and currently resolves to IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services, a detail sometimes used by attackers to appear legitimate. The site is still active at the time of reporting, and there is no current indication of removal from public blocklists or Google Safe Browsing.

Given its active status and alignment with known phishing tactics, treasury-flarefndn.live poses a substantial security risk. Users should avoid interacting with the domain and refrain from entering any sensitive information. Security teams are advised to add this domain and its associated IP to blocklists and monitor for further related infrastructure. Continued vigilance is recommended due to the site’s ongoing activity and its ability to evade detection by most vendors.