VirusTotal
9 / 95
“Flare Network - EVM Hub for Web3.0”
flarenetportal.online — 内容不可用. 品牌冒充:Coinbase; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 9/95 (ChainPatrol, alphaMountain.ai, CRDF, CyRadar, Ermes); PhishDestroy score 77/100. 注册商: NameCheap.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis of the domain flarenetportal.online indicates it was registered on August 4, 2025, through NameCheap, Inc., and was operational until recently taken offline. The domain resolved to IP 162.213.255.31, hosted on AS22612 (Namecheap, Inc.) in the US. No SSL certificate was detected, increasing the risk of unencrypted credential interception. The page title, 'Flare Network - EVM Hub for Web3.0,' does not directly reference Coinbase, but the domain is explicitly flagged for brand impersonation targeting Coinbase, classified as a crypto scam.
Detection data shows 9 of 95 security vendors on VirusTotal flagged the domain, and it appears on at least one blocklist (PhishDestroy). Trust scores from Gridinsoft (0/100) and Scamadviser (49/100) further suggest malicious intent, though the latter indicates some ambiguity in automated assessments. The domain's nameservers (dns1.namecheaphosting.com, dns2.namecheaphosting.com) align with common registrar-hosted infrastructure, which may facilitate rapid takedowns or re-deployments. Defenders should treat this domain as part of a broader crypto-focused phishing campaign, particularly given its explicit targeting of Coinbase users.
While the site is currently offline, historical DNS and WHOIS records should be preserved for further investigation. Monitoring for re-registration or shifts to new IPs under the same registrar is recommended, as NameCheap-hosted phishing domains frequently reappear with minor modifications. No evidence of a phishing kit or specific payload delivery was provided, so the exact attack vector remains unconfirmed. Blocklisting the domain and associated IP at the perimeter is advised until further analysis confirms its permanent removal.
针对该主机的爬虫与浏览器观察记录,以及针对“Keitaro”式流量分配系统的实时指纹检测。
扫描说明: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='flarenetportal.online', port=80): Max retries exceeded with url: / (Caused by NewConnectio
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
dns1.namecheaphosting.comdns2.namecheaphosting.comLocation describes the IP network.
12 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
已存储 255 个仿冒域名
显示 255 个中的 100 个
由 1 名社区成员报告;首次发现于 2025年10月11日
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent