governance-flarenetwork[.]xyz

This domain, governance-flarenetwork.xyz, was registered on July 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. Analysis indicates it is actively resolving to IP address 192.162.199.139 and is currently flagged by three security blocklists, including PhishDestroy, MetaMask, and SEAL. As of July 28, 2026, four out of ninety-one security vendors on VirusTotal have detected this domain as malicious, confirming its high-risk status.

The domain's nameservers are hosted on coco.bunny.net and kiki.bunny.net, a configuration often observed in phishing infrastructure due to its low-cost and rapid deployment capabilities. The domain name incorporates 'flarenetwork,' suggesting an intent to deceive users associated with the Flare Network ecosystem, though the exact content and mechanics of the phishing site remain unconfirmed. No evidence currently links this domain to a specific phishing kit or additional brand impersonation beyond the naming convention.

Defenders should treat this domain as an active threat and prioritize blocking access at the DNS and network levels. Organizations using Flare Network or related services are advised to alert users and monitor for credential harvesting or unauthorized transactions originating from this infrastructure. Further investigation into the hosting provider and associated IP range may reveal additional connected domains or campaigns.