dashboard-firelightfi[.]live

Analysis of dashboard-firelightfi.live indicates it is an active phishing domain registered on July 16, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain is currently flagged on one security blocklist (PhishDestroy) but has not been detected by any of the 95 vendors in the most recent VirusTotal scan, though the absence of detections does not confirm safety. Infrastructure analysis reveals the domain resolves to IP address 104.21.1.99 and uses Cloudflare nameservers (kipp.ns.cloudflare.com and nola.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. The domain's name, incorporating 'firelightfi,' suggests an attempt to mimic a financial service or platform, though the exact brand or service being impersonated has not been confirmed through available evidence. No page title, phishing kit, or specific scam type has been identified in the current data. The registration age of four days and its presence on a security blocklist align with typical phishing domain behavior, where rapid deployment and short lifespans are observed. Defenders should treat this domain as high-risk for credential harvesting or financial fraud. Organizations are advised to block the domain and its resolving IP at the network level, monitor for connections from internal assets, and alert users to potential phishing attempts. Further investigation is required to determine the exact nature of the phishing content, the targeted brand, and any associated malicious infrastructure. Given the domain's recent registration and active status, continuous monitoring for new detections or blocklist additions is recommended.