set-fireligiht[.]site

This domain set-fireligiht.site is assessed as an under-investigation generic_phishing infrastructure impersonating a DeFi-related service page titled 'Firelight – A Protocol for DeFi Cover'. The content suggests a deceptive financial interface designed to mislead users into interacting with a fraudulent Web3 environment. Although VirusTotal currently reports 0/95 detections, external blocklist intelligence and enforcement actions indicate active malicious classification.

Technical analysis shows the domain was created on June 06, 2026 and registered through PDR Ltd. d/b/a PublicDomainRegistry.com. Despite the absence of antivirus detections (0/95), the domain appears on 4 security blocklists and is referenced in 4 AlienVault OTX threat intelligence pulses. It is also actively blocked by MetaMask, PhishDestroy, SEAL, and ScamSniffer, indicating strong ecosystem-level suspicion. Page title observed: 'Firelight – A Protocol for DeFi Cover'. Current status is taken offline.

If a user interacted with this domain, immediate risk mitigation should include revoking any wallet approvals issued during the session, transferring remaining assets to a secure wallet, and rotating credentials for any linked services. Browser cache and DNS artifacts should be cleared, and system-level malware scans should be performed. Users should also monitor blockchain approvals for unauthorized contract permissions and treat any signatures requested by similar interfaces as high-risk until verified through trusted sources.