Firelight
Certificate findings for Firelight
DomainSpoof matched these hostnames, from public certificate logs, to Firelight's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 10 findings, grouped by hostname
- proposals-firelight.top US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 43 d ago
DetailsHide details for proposals-firelight.top
- Hostname
- proposals-firelight.top
- First seen
- 2026-11-04 20:36 UTC
- First published
- 2026-11-04 21:09 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 21:16 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36 · precertificateValid 2026-11-04 00:00 UTC to 2027-01-27 16:48 UTCLogged 2026-11-04 20:31 UTC in DigiCert Sphinx2027h1, entry 358,897,767SHA-256 4a54ffb291d73c28dfa451b188b036c43185aeaa42a3fcbf237058d1a1061106Public key SHA-256 47d9a7f75e2498f8fdc471e89f115576431a2d24baf91e9e67efd4fe94b27e42
- Brand
- Firelight
- Addresses
- 104.21.82.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.209.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.82.240, 172.67.209.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- proposals-firelight.top
- Registered
- 2026-09-23 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 21:09 UTC
- firelight-allocation.fun US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 d ago
DetailsHide details for firelight-allocation.fun
- Hostname
- firelight-allocation.fun
- First seen
- 2026-11-03 17:49 UTC
- First published
- 2026-11-03 18:16 UTC
- Listing
- MetaMask: first observed in the feed 2026-11-03 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Not resolving · checked 2026-11-05 10:33 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-03 13:01 UTC to 2027-02-01 13:59 UTCLogged 2026-11-03 14:01 UTC in Google PlumbersArms2027h1, entry 591,852,419SHA-256 143c8ecec158a45fab41281e9a79f5efe4e40b11820a07a25e5b250ff70b73daPublic key SHA-256 82b92a492d58120a46496c24f803c56289e54c2a995cc8e9a86585fff6b597a7
- Brand
- Firelight
- Addresses
- 104.21.22.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.201.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:c9b02606:4700:3037::6815:1608
- Cloudflare
- Cloudflare (104.21.22.8, 172.67.201.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- firelight-allocation.fun
- Registered
- 2026-11-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 18:19 UTC
- firelightfi.click US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for firelightfi.click
- Hostname
- firelightfi.click
- First seen
- 2026-11-03 02:21 UTC
- First published
- 2026-11-03 02:31 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 02:45 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-03 01:16 UTC to 2027-02-01 02:13 UTCLogged 2026-11-03 02:16 UTC in Geomys Tuscolo2027h1, entry 452,888,395SHA-256 119adff9e4097d89a84b3a95028c613e6b86c7600a44232035ddba279d841eb2Public key SHA-256 a9219b0108975d094f1c1e91372811ab6716f4bdf3205e43a55f44993db240d0
- Brand
- Firelight
- Addresses
- 104.21.82.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.153.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:52392606:4700:3034::ac43:99ce
- Cloudflare
- Cloudflare (104.21.82.57, 172.67.153.206): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- firelightfi.click
- Registered
- 2026-07-07 · Dynadot, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 03:07 UTC
- firelightfinanceportal.com US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 11 mo ago
DetailsHide details for firelightfinanceportal.com
- Hostname
- firelightfinanceportal.com
- First seen
- 2026-11-03 02:21 UTC
- First published
- 2026-11-03 02:31 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 02:45 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by Sectigo Public Server Authentication CA DV E36Valid 2026-11-03 00:00 UTC to 2027-01-27 20:09 UTCLogged 2026-11-03 02:20 UTC in Geomys Tuscolo2027h1, entry 452,925,831SHA-256 af63450f789f1a4c6c1f9d3da54835ccd40c656941feb09ba2c646285944319ePublic key SHA-256 c81362149d161c1ebfab3b745e5586121fc124e61369237c72e615b8da269e40
- Brand
- Firelight
- Addresses
- 104.21.48.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.136.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:30bc2606:4700:3037::ac43:88c9
- Cloudflare
- Cloudflare (104.21.48.188, 172.67.136.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- firelightfinanceportal.com
- Registered
- 2025-11-30 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 03:07 UTC
- vote-firelight.fi US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for vote-firelight.fi
- Hostname
- vote-firelight.fi
- First seen
- 2026-10-30 15:56 UTC
- First published
- 2026-10-30 15:59 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 16:12 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-10-30 14:54 UTC to 2027-01-28 14:54 UTCLogged 2026-10-30 15:52 UTC in Let's Encrypt Sycamore2027h1, entry 857,928,470SHA-256 69fc6352f4df2fb841b54d99ec5ee864c7e22bafe72fdacc6e811fde21b839d7Public key SHA-256 5942d5e990b58bc8bba645afcea06b294fb2e9c69147d0a48f51794a5aa73af7
- Brand
- Firelight
- Addresses
- 104.21.29.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.148.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.29.66, 172.67.148.141): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- vote-firelight.fi
- Registered
- 2026-05-05
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- votes-firelight.fi US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for votes-firelight.fi
- Hostname
- votes-firelight.fi
- First seen
- 2026-10-30 13:00 UTC
- First published
- 2026-10-30 13:53 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 14:01 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-30 11:59 UTC to 2027-01-28 11:59 UTCLogged 2026-10-30 12:57 UTC in Google PlumbersArms2027h1, entry 523,431,274SHA-256 22820abd096f0ba8f3052649d282f7881db8ef0168c6d0038e7e08086392771fPublic key SHA-256 608a803adedabacea2c85dbe0c6cd369f4a82c415ab9b6e36cab975d714a985a
- Brand
- Firelight
- Addresses
- 104.21.80.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.152.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.80.172, 172.67.152.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- votes-firelight.fi
- Registered
- 2026-05-06
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- firelightfi.site US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 d ago
DetailsHide details for firelightfi.site
- Hostname
- firelightfi.site
- First seen
- 2026-10-30 11:41 UTC
- First published
- 2026-10-30 11:47 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Not resolving since 2026-11-03 · checked 2026-11-04 11:51 UTC
- Listed
- MetaMask
- Certificate logged in CT
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE1Valid 2026-10-28 23:50 UTC to 2027-01-26 23:50 UTCLogged 2026-10-29 00:49 UTC in Google PlumbersArms2027h1, entry 498,193,221SHA-256 7f7712dd493363a5cf9784521f59cb648ad1fcfb67a11389d3a1f7fb011d3023Public key SHA-256 92704a25c30fc8b36fb600ccb1f82e757cfc18dbc15e6c2b46d18908ef7a4441
- Brand
- Firelight
- Addresses
- 104.21.13.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.197.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:c5ab2606:4700:3035::6815:d26
- Cloudflare
- Cloudflare (104.21.13.38, 172.67.197.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- firelightfi.site
- Registered
- 2026-10-29 · Dynadot Inc
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- proposal-firelight.fi US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for proposal-firelight.fi
- Hostname
- proposal-firelight.fi
- First seen
- 2026-10-28 23:11 UTC
- First published
- 2026-10-28 23:28 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 23:41 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-10-28 22:11 UTC to 2027-01-26 22:11 UTCLogged 2026-10-28 23:09 UTC in Let's Encrypt Sycamore2027h1, entry 828,472,432SHA-256 3b13f8c9352e8b412a30e095f5e0328c153b5d397b7bc5b48453db5fc6a731a5Public key SHA-256 2a908c33c8914ba0526bf82e781047a9cf07d3f4c90857ff88bef9b8f585c3a7
- Brand
- Firelight
- Addresses
- 104.21.42.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.214.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.42.249, 172.67.214.20): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- proposal-firelight.fi
- Registered
- 2026-05-04
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:44 UTC
- allocation-firelight.fi US · AS13335 · Cloudflare, Inc.2 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for allocation-firelight.fi
- Hostname
- allocation-firelight.fi
- First seen
- 2026-10-27 05:37 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTCPhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 09:06 UTC
- Listed
- MetaMask
- Latest DNS check
- Observed in the MetaMask feed
- We matched the new listing
- Brand
- Firelight
- Addresses
- 104.21.18.239 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.183.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (104.21.18.239, 172.67.183.232): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- allocation-firelight.fi
- Registered
- 2026-05-02
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:26 UTC
- firelightfi-mainnet.com US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 8 mo ago
DetailsHide details for firelightfi-mainnet.com
- Hostname
- firelightfi-mainnet.com
- First seen
- 2026-10-27 05:37 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 09:06 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- We matched the new listing
- Latest DNS check
- Brand
- Firelight
- Addresses
- 104.21.5.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.132.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::ac43:84fd2606:4700:3037::6815:534
- Cloudflare
- Cloudflare (104.21.5.52, 172.67.132.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- firelightfi-mainnet.com
- Registered
- 2026-03-20 · Tucows Domains Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:26 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Firelight when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

