mass.report
Scan Intelligence Report0/100
medium Risk
dapp-flarenetworks.app
https://dapp-flarenetworks.app/
IP
172.67.173.134 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
0 days ⚠
HTTP
200 · 23.4s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Flare (Flare Networks) / dapp-flarenetworks.app
Vendors
27/30
Status
partial
✓ avast✓ bitdefender✓ brightcloud✗ norton✗ threatyeti✓ yandex✗ drweb✓ eset✓ microsoft✓ sophos✓ polyswarm✓ avg✓ emsisoft✓ apple✓ isitphish✓ virustotal✓ urlscan✓ netcraft✓ urlquery✓ openphish✓ cisa✓ spamhaus✓ phishtank✓ urlabuse✓ google✓ apwg✓ phishreport✓ mcafee✓ kaspersky✓ fortiguard
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Flare (Flare Networks) / dapp-flarenetworks.app
Unknowntechnology | finance | cryptocurrency · 7/19/2026
Summary
The page presents branding and UI that resembles Flare Network governance visuals, including references to FLR Rewards and a vote interface. However, the domain dapp-flarenetworks.app is extremely new (0 days old) and the page loads a large number of off-domain assets and scripts, with POST requests to Arbitrum RPC endpoints detectable in the capture. While there is strong visual branding suggesting Flare, the domain identity does not clearly match Flare’s official domain, and substantial exfiltration style indicators are present in network activity and asset naming, indicating possible credential or data capture risk. Given the evidence, this should be treated as potential impersonation/phishing until verified against official domain ownerships; do not assume first-party hosting of Flare governance content on this new domain.
Evidence Summary
▸Observed 1 capture stage(s); canonical stage is settled_render.
▸POST targets observed during capture: https://dapp-flarenetworks.app/, https://dapp-flarenetworks.app/assets/cache_bebb569373.php?req=fp, https://arb1.arbitrum.io/rpc.
▸Distinctive asset clues: drift-formpulse.js, aFlYQuaq5oJZA7D_tgCdJ.js, css2, 6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku, 3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD.
Capture
Stages: 1
Canonical: Settled Render
Changed: No
Credential Signals
Forms: 0
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 139
Hosts: 73
Domains: 16
Attack Techniques (2)
SPA-like dynamic credential-capture indicators (static HTML contains no forms; forms likely rendered client-side via JavaScript bundles such as drift-formpulse.js).POST requests to the page and to Arbitrum RPC endpoints from the same domain, which can indicate data exfiltration or interaction with blockchain RPC surfaces.
Indicators of Compromise (1)
▸Page title referencing Flare governance and FLR rewards (potential impersonation cue).
Risk AssessmentUsed in abuse reports
The site displays Flare branding and a governance voting UI, yet the domain is freshly registered (0 days) and not clearly tied to Flare’s official domain. The page loads many external assets and performs POST requests to blockchain RPC endpoints, which could be used for data exfiltration or credential capture in a phishing flow. Given the combination of brand-mimicking visuals and suspicious hosting/origin signals, this warrants caution and probably a takedown/suspension investigation until domain ownership is verified. The site should be treated as suspicious impersonation risk with potential abuse rather than a confirmed first-party service.
Recommended Action
Suspend Domain
Cross-Reference9
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API