firelightfi-launch[.]live

The domain firelightfi-launch.live was registered on July 22 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the Cloudflare address 172.67.164.96 and uses the authoritative nameservers amos.ns.cloudflare.com and zoe.ns.cloudflare.com. The domain appears on a single security blocklist and has been flagged by the PhishDestroy sinkhole as a malicious phishing infrastructure.

VirusTotal records indicate that the site was submitted to 91 AV engines, none of which raised a detection at the time of analysis; this absence of detections does not constitute a safety assurance. The domain’s age of only four days, combined with its rapid appearance on a blocklist, is consistent with a newly deployed phishing campaign. No public SSL certificate details, HTTP response codes, page title, or content analysis have been published, leaving the exact phishing payload and targeted brand undefined.

Current intelligence therefore classifies the site as a generic phishing operation that remains active. Defenders should add firelightfi-launch.live to URL filtering and DNS blocklists, enforce outbound traffic inspection for connections to the 172.67.164.96 address, and monitor Cloudflare‑associated IP ranges for similar short‑lived domains. Continuous re‑scanning on multi‑engine platforms is recommended to capture any future malicious payloads that may be uploaded to the site.