dege-events[.]com

Analysis of dege-events.com indicates that the domain was registered on 17 July 2025 through NameSilo, LLC. The site resolves to the IP address 188.114.96.3, which is advertised as part of Cloudflare’s network (AS13335) and geolocated to the United States. No TLS certificate was observed for the host, meaning connections are served over plain HTTP. The only visible page element is the title “Nur einen Moment…”, which provides no indication of the intended victim flow.

A VirusTotal scan returned a single positive detection out of 95 submitted security vendors, confirming that at least one scanner identified malicious behavior. The domain is listed on a single external blocklist and has been added to the PhishDestroy feed, which resulted in the current offline status reported by the monitoring system. The registrar information, hosting provider, and lack of SSL collectively suggest a quickly provisioned phishing infrastructure that relies on Cloudflare’s edge services for anonymity.

Because the site is no longer reachable, active payload collection is not possible, but the historical evidence is sufficient to classify the domain as a confirmed phishing vector. Defenders should add 188.114.96.3 to network‑level deny lists, block dege-events.com at DNS and proxy layers, and continue to monitor Cloudflare‑originating IP ranges for similar short‑lived domains. Additional investigation of the single vendor detection on VirusTotal may reveal the specific payload or credential‑stealing technique employed, and threat‑intel sharing platforms should be updated with the domain registration date, hosting ASN, and blocklist references to improve collective detection.