events-supernova[.]xyz

PhishDestroy identifies events-supernova.xyz as a malicious domain engaged in credential theft phishing. The site was designed to impersonate legitimate event platforms, tricking visitors into entering sensitive login credentials. No specific brand or drainer kit was identified, but the domain's structure suggests a generic phishing operation targeting unsuspecting users.

Technical indicators further confirm the threat. VirusTotal reports 4 out of 95 security vendors flagging this domain as malicious. The domain was created on February 27, 2026, and is registered through Dynadot LLC, a known registrar for suspicious domains. It resolves to IP address 172.67.168.190 and uses a Let's Encrypt SSL certificate (E7). The domain is currently offline, returning a 504 Gateway Time-out error, and appears on three security blocklists. Google Safe Browsing status is not explicitly provided but the blocklist presence is a strong negative signal.

As of the latest assessment, events-supernova.xyz is offline and has been taken down, likely due to abuse reports or registrar intervention. However, the domain remains a risk if it becomes active again. Users who may have visited the site should change their passwords for any accounts entered and enable two-factor authentication. PhishDestroy advises blocking this domain at the network level and monitoring for any re-registration or similar domains. No further interaction with events-supernova.xyz is recommended.