vote-flarefoundations[.]com

This domain, vote-flarefoundations.com, is under active investigation as a high-risk phishing site targeting cryptocurrency wallet users. Registered on June 10, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain has been flagged by multiple security vendors, including PhishDestroy, MetaMask, and SEAL, and appears on three independent blocklists. VirusTotal analysis indicates that 10 of 91 security vendors classify this domain as malicious, reinforcing its suspicious status.

No additional infrastructure details, such as hosting provider, IP address, or SSL certificate issuer, are currently available in the intelligence feed. The specific phishing campaign associated with this domain remains unconfirmed, though the inclusion of 'flarefoundations' in the domain name suggests a potential focus on Flare Network users or related crypto assets. The exact content of the site has not been analyzed, so the presence of credential harvesting forms, wallet drainers, or other malicious functionality cannot be verified at this stage.

Defenders should treat this domain as active and high-risk, particularly for users interacting with cryptocurrency platforms. Immediate blocking at the DNS or firewall level is recommended, alongside monitoring for connections to this domain in network logs. Further analysis, including sandbox execution or deeper infrastructure mapping, may provide additional context on the threat actor’s tactics and intended targets.