event-stargate[.]com

PhishDestroy identifies the active crypto-draining domain event-stargate.com as a generic phishing host propagating a drainer kit tracked under seed 92441c. The campaign mimics legitimate cryptocurrency or event-related portals to trick users into connecting wallets and signing malicious transactions. No specific brand is mimicked in the available telemetry, but the generic lure suggests opportunistic targeting rather than a single targeted organization.

This domain was flagged on 2 security blocklists while showing zero detections on VirusTotal (2/95), indicating evasion of current detection engines. It resolves to IP 188.114.96.3, was created on November 23, 2025 via Dynadot Inc, and is secured by a Google Trust Services SSL certificate. Despite active blocking by MetaMask and SEAL, the combination of recent registration, clean VT score, and dual blocklist presence suggests early-stage deployment with potential for expansion.

As of this report, event-stargate.com remains active with a status of under investigation. Immediate responses include MetaMask and SEAL blocking, but users should treat all links or attachments related to this domain as high-risk. Remaining risk is elevated due to low detection coverage, recent activation, and lack of historical takedown data. Users are advised to avoid the domain entirely, verify any URLs via independent sources, and monitor wallet activity for unauthorized transactions.