events-boatkid[.]org

Analysis of events-boatkid.org indicates a generic phishing domain registered on August 16, 2025, through NameSilo, LLC. The domain is currently offline, with a last observed HTTP response displaying the page title 'Just a moment...', a common Cloudflare interstitial message. Infrastructure analysis reveals the domain resolves to IP 172.67.199.76, hosted on AS13335 (Cloudflare, Inc.) in the United States. SSL certificate classification WE1 suggests a low-trust or automated issuance pattern, though no specific certificate details are available for deeper assessment. Detection data is limited: one of 93 security vendors on VirusTotal flagged the domain as malicious, and it appears on a single security blocklist (PhishDestroy).

Gridinsoft assigns a trust score of 0/100, reinforcing its suspicious classification. No additional context—such as targeted brands, phishing kit signatures, or Safe Browsing results—is present in available intelligence. The domain’s creation date (11 months prior to the report) does not align with typical short-lived phishing campaigns, but this may reflect delayed detection or repurposing of older infrastructure. Defenders should treat this domain as a confirmed phishing indicator, particularly given its Cloudflare-hosted status and blocklist inclusion.

Network-level blocking is recommended for the domain and its resolved IP (172.67.199.76). Further investigation into associated infrastructure (e.g., other domains on the same IP or SSL certificate) may uncover related threats. No evidence links this domain to specific phishing lures (e.g., credential harvesting, payment fraud), so content-level analysis is pending.