---
title: "Is firelight-voting.web.app a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "firelight-voting.web.app"
verdict: "Critical Risk"
title: "Is firelight-voting.web.app a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/firelight-voting.web.app
assessed: 2026-10-22
---

# Is firelight-voting.web.app a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** firelight-voting.web.app shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 4 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 3% confidence (AbuseIPDB, 4 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |
| Certificate | Encrypted connection (Issued by WR4) | Noted |
| Hosted by | FASTLY (Server in US) | Noted |

## The page as captured


![Screenshot of the firelight-voting.web.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/firelight-voting.web.app/screenshots/first.png)

_What firelight-voting.web.app served when TrustSniffer captured it on 2026-10-22. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

Firelight Voting is a single-page website on a shared web.app subdomain. Its page is titled "Firelight Voting - Phase 2 Voting is live", and it presents itself as the entry point to a second round of a community voting campaign. The captured homepage is a short text page, and the available evidence does not show what a visitor is asked to do or what the site gains from it. Its apparent purpose is to attract participants to a time-sensitive voting event.


### Scam/Impersonation Risk

This site carries **confirmed contradictory signals**. Several independent threat-intelligence engines currently rate the domain as malicious, and one more rates it as suspicious. These detections amount to a **confirmed blacklisting**, and a known-phishing indicator also fired. Together they trigger the impersonation guard and drive the cautionary assessment. The "Phase 2 voting is live" framing is also a common lure pattern in campaign-themed credential and wallet-phishing pages. The urgency and the generic community-vote pretext give a visitor no way to confirm who is running the vote. Four abuse reports exist against one of the site's edge addresses. These apply to infrastructure shared with many other tenants and carry low confidence, so they are not treated as site-specific proof. They do not offset the direct detections. Dynamic testing found no wallet-connection prompts, clipboard tampering, hidden forms, credential posts to outside destinations, or content cloaking. That reduces the likelihood of an active drainer. It does not neutralize a confirmed blacklist, because a page can be switched to a malicious payload quickly. No conflicting legal identities were found. Evidence:

- Homepage: four security engines flag the domain as malicious and one as suspicious, with a known-phishing indicator also recorded.
- Homepage behavior test: 27 outbound data requests and 10 outbound posts, none to non-whitelisted destinations. No wallet-connect, clipboard-write, or hidden-form activity across three successful runs.
- Homepage behavior test: 15 browser console errors, which points to an unpolished or hastily built page.
- The site's shared edge address: 4 abuse reports with low confidence, attributed to shared provider infrastructure.

### Regulatory Verification Notes

The evidence contains no licensing, registration, or regulator reference for this site, and no business or operator disclosure. This is a verification gap only. Combined with the threat detections above, it leaves no independent basis for connecting the page to a real organization. A search of third-party broker-reputation records returned no match, so there is no reputational context in either direction. The page's TLS certificate is valid and issued by a recognised authority. It is a domain-validated certificate, which proves control of the domain and says nothing about the identity or intent of its operator. Evidence:

- Homepage: a short page (about 3,200 characters of text) with no visible licensing number, company name, or registration detail in the captured content.
- Transport encryption: TLS certificate issued by WR4 (DV), valid to 2026-12-22, with about 61 days remaining.
- Hosting: served from AS54113 (Fastly, Inc., US).
- Third-party broker records: no match.

### What to Verify Next

Any contact with this page should first be checked against the official channel of the project it claims to represent. That means finding the vote announcement on a source reached independently, such as the project's own verified social accounts or documentation, and not through this page or links that lead to it. If the project does not confirm a Phase 2 vote at this address, the page should be treated as unauthorized. Confirm the official contact and support channels through an offline or independent route. If the page is linked from a message or advertisement, that sender should be validated as well. Evidence:

- Homepage: the "Phase 2 voting is live" announcement carries no verifiable reference to a sponsoring organization.
- Threat intelligence: current malicious ratings mean any link to this address should be treated as unverified until the project confirms it.
- Shared hosting namespace: the web.app subdomain gives no indication of who controls the project.

### Summary Verdict

The deterministic assessment places this site in an elevated-risk, clearly cautionary posture. Confirmed threat detections outweigh its technically sound transport security and clean-looking behavioral profile. The real-world identity of the operator remains unestablished, and the available evidence gives no basis for treating the site as trustworthy.


### Infrastructure Integrity

The site is delivered through Fastly's content delivery network. All observed addresses are edge servers, and the origin host could not be observed. This protective layer is a mitigating factor only. It does not offset the reputation risk. Edge-only visibility also prevents independent verification of the hosting and can mask rapid content swaps behind a stable-looking front end.


### Closing Assessment

Do not log in, connect a wallet, sign any message or transaction, or enter credentials or payment details on this site. Read-only viewing is the most that is advisable. Participation in the vote should happen only through an official channel the project itself confirms.


_Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, registration and ownership, behaviour in a sandbox.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

### 03 Behaviour in a sandbox
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)
- The page sent data to other domains many times while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_POSTS_HEAVY`)

### Signals weighed against the site

- AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of firelight-voting.web.app.

- The request stayed on firelight-voting.web.app. It was not redirected to another domain. (Clear)
- It is hosted on FASTLY, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | FASTLY - Fastly, Inc., US |
| Country | US |
| Server IP | 2620:0:890::100 |
| Name servers | Not available |
| CDN / edge network | Detected (fastly) |
| Resolved IP addresses | 2 |
| Edge IP addresses | 2 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR4 |
| SSL expiry | 2026-12-22 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 4 flagged \| AbuseIPDB: 3% confidence, 4 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about firelight-voting.web.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [portal-moonshot-egw.netlify.app](https://trustsniffer.com/report/portal-moonshot-egw.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [livetrustwalletsnycs.vercel.app](https://trustsniffer.com/report/livetrustwalletsnycs.vercel.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-yaw.netlify.app](https://trustsniffer.com/report/portal-moonshot-yaw.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-jbe.netlify.app](https://trustsniffer.com/report/portal-moonshot-jbe.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-ccy.netlify.app](https://trustsniffer.com/report/portal-moonshot-ccy.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-3an.netlify.app](https://trustsniffer.com/report/portal-moonshot-3an.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-b0g.netlify.app](https://trustsniffer.com/report/portal-moonshot-b0g.netlify.app), another .app site assessed as critical-risk (Critical Risk, 4/100)
- [portal-moonshot-p35.netlify.app](https://trustsniffer.com/report/portal-moonshot-p35.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [fastswap.fr](https://trustsniffer.com/report/fastswap.fr), another site assessed as critical-risk (Critical Risk, 0/100)
- [signup-worldxyz.com](https://trustsniffer.com/report/signup-worldxyz.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24)
- [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer)
- [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/firelight-voting.web.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/firelight-voting.web.app · assessed 2026-10-22.*