tge-flt[.]com

This domain, tge-flt.com, is actively facilitating a cryptocurrency drainer scheme under the guise of a Firelight (FLT) Genesis Airdrop. Analysis indicates the site is designed to trick users into connecting wallets to malicious smart contracts, which then execute unauthorized token transfers. The page title "Firelight — FLT Genesis Airdrop" is a direct attempt to impersonate legitimate airdrop campaigns, targeting users familiar with the Firelight token ecosystem. The threat specifically exploits trust in token distribution events, a common tactic in crypto phishing operations. Infrastructure analysis reveals the domain was registered on July 05, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It currently resolves to the IP address 172.67.160.131, which has been associated with other phishing infrastructure. VirusTotal detection shows 1 out of 95 security vendors flagging the domain as malicious, a low but significant indicator given the domain's recent creation. No additional blocklist entries were identified at the time of analysis, though the domain remains active and unmitigated. Users who have visited tge-flt.com or interacted with the alleged airdrop should immediately revoke any connected wallet permissions via blockchain explorers or wallet interfaces. All connected wallets should be treated as compromised, and users are advised to transfer remaining assets to a new, secure wallet. Browser data, including cookies and cached credentials, should be cleared to eliminate residual session tokens. Monitoring for unauthorized transactions is critical, and users should report the incident to relevant blockchain security platforms for further investigation.