vote-umbra[.]app

The domain vote-umbra.app presents a deceptive front, claiming to be "Flare: The blockchain for data" via its page title, while its actual nature and technical configuration indicate a malicious or fraudulent operation. The site poses a threat as a potential phishing or credential-harvesting platform, likely impersonating the legitimate Flare blockchain project to deceive users into revealing sensitive information or installing malware. Its registration and hosting details further suggest an intent to evade detection through rapid setup and anonymization.

Technical evidence confirms the site's suspicious profile. VirusTotal reports 3 detections out of 95 scanners, with flags from Forcepoint ThreatSeeker, Gridinsoft, and Kaspersky. The domain is hosted on IP 188.114.97.3 (United States), assigned to AS13335 Cloudflare, Inc., and is registered under PDR Ltd. d/b/a PublicDomainRegistry.com. It was created on 2026-06-18, a very recent date, and uses an SSL certificate from Google Trust Services (WE1). Nameservers are dell.ns.cloudflare.com and odin.ns.cloudflare.com. The site employs the ipify technology, and its DOM risk score is 83, indicating high risk. It is listed on 3 blocklists.

The domain's current status is BANNED, reflecting active mitigation efforts. Given the high DOM risk score of 83, multiple security vendor flags, recent creation date, and blocklist presence, the risk level is assessed as high. Users should avoid any interaction with this site.