event-firelightfi[.]com

event-firelightfi.com is a phishing domain targeting MetaMask users. Despite being offline now, it was flagged by one out of 91 vendors on VirusTotal and is listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and hosted on an IP managed by Cloudflare, Inc. The SSL certificate was issued by Google Trust Services.

The domain was created on June 17, 2026, and detected by PhishDestroy just two days later on June 19, 2026. This rapid detection highlights the effectiveness of PhishDestroy's monitoring systems in identifying threats during the critical early window before they are widely recognized by antivirus databases. The platform risk score for this domain is 73 out of 100, indicating a significant threat level.

The swift inclusion of event-firelightfi.com in public blocklists underscores the domain's malicious intent. Phishing domains like this often exploit the gap between registration and antivirus detection to target unsuspecting users. The specific focus on MetaMask users suggests an attempt to harvest sensitive information such as wallet credentials. Although the site is currently offline, the incident serves as a reminder of the ongoing threat posed by phishing operations.