kellyclaudeevent[.]net

The domain kellyclaudeevent.net was registered on March 01, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently listed as offline. DNS resolution points to 104.21.12.153, an address owned by AS13335 Cloudflare, Inc., with authoritative nameservers colin.ns.cloudflare.com and jean.ns.cloudflare.com. The site presented a TLS certificate issued by Let’s Encrypt (E7), confirming that HTTPS was enabled before the takedown. Infrastructure fingerprints reveal a stack comprising Node.js, Express, Salesforce, Google Sign‑in, Apple Sign‑in, Apple iCloud Mail, Amazon Web Services, and Stripe, indicating a web application capable of handling authentication and payment workflows.

The page title returned during the brief live window was "X. It’s what’s happening / X," but no further content has been captured for analysis. Threat intelligence feeds have flagged the domain on four blocklists—PhishDestroy, MetaMask, ScamSniffer, and SEAL—and VirusTotal recorded detections from two of ninety‑three security vendors, reinforcing confidence in its malicious intent. A Gridinsoft trust score of 0 / 100 further underscores the lack of credibility.

The elevated risk rating reflects the convergence of these indicators, the use of reputable brand sign‑in services to lure victims, and the presence of payment‑processing components that could be abused for credential harvesting or financial fraud. Defenders should add kellyclaudeevent.net to URL filtering and network‑level blocklists, monitor DNS queries for the associated Cloudflare IP, and enforce strict validation of any login flows that reference the domain. Continued observation of the registrar and any re‑registration attempts is advised, as threat actors may redeploy the same branding after a brief offline period.