vote-lighters[.]pages[.]dev

Analysis of vote-lighters.pages.dev indicates a high-risk phishing domain targeting users with a fraudulent LIGHTER Rewards scheme. The domain, registered on June 8, 2026, is hosted on Cloudflare Pages infrastructure and resolves to IP address 172.66.45.17. The page title, 'LIGHTER Rewards Update,' suggests an attempt to impersonate a legitimate rewards or loyalty program, though the exact content and mechanics of the scam remain unverified due to the absence of direct page analysis. Infrastructure analysis reveals the use of a Google Trust Services SSL certificate, which provides encryption but does not validate the site's legitimacy. The domain appears on four security blocklists and is actively blocked by multiple threat detection systems, including SEAL, MetaMask, ScamSniffer, and PhishDestroy. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. Despite these indicators, the domain has not been flagged by any vendors in recent scans, though this absence does not confirm safety. The domain remains active as of July 12, 2026, posing an ongoing threat to users who may encounter it through phishing links or deceptive advertisements. Defenders should prioritize blocking this domain at the network and endpoint levels, particularly in environments where LIGHTER-related services or rewards programs are relevant. Monitoring for related domains or subdomains on the same Cloudflare Pages infrastructure may help identify additional threats. Given the domain's recent registration and active status, continued vigilance and proactive mitigation are recommended.