jedemenatomorrowland[.]cz

This domain, jedemenatomorrowland.cz, is flagged as a high-risk phishing site targeting event ticket buyers. Registered on January 18, 2026, through REG-INTERNET-CZ, it resolves to the IP address 216.198.79.65 and uses nameservers ns1.vercel-dns.com and ns2.vercel-dns.com. Analysis indicates the domain remains active as of July 20, 2026, and has been blocked by PhishDestroy. It appears on one security blocklist, and six of 95 security vendors on VirusTotal have flagged it as malicious. Infrastructure analysis reveals the domain leverages Vercel DNS, a common hosting choice for phishing campaigns due to its low-cost and rapid deployment capabilities. The domain name suggests an attempt to impersonate a ticketing or event promotion site, though the exact brand or event being mimicked is not confirmed in available intelligence. No specific phishing kit or payload has been identified in the current data. Defenders should treat this domain as actively malicious. Recommended actions include blocking the domain and its resolving IP at the network perimeter, monitoring for internal connections to 216.198.79.65, and alerting users to potential phishing risks associated with event ticket purchases. If internal access logs indicate prior visits, initiate incident response procedures to assess potential credential compromise or data exposure. Given the domain's recent registration and ongoing activity, assume it remains a viable threat until further evidence confirms its takedown.