event-aiden[.]fun

The domain event-aiden.fun was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently reported as offline. DNS resolution points to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are marty.ns.cloudflare.com and poppy.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. No SSL certificate is associated with the host, meaning HTTPS connections are not available.

The only visible page title returned from the site is "Default Web Site Page," providing no further context about the content served. Security telemetry shows the domain appears on two independent blocklists, PhishDestroy and ScamSniffer, confirming that it has been identified as malicious by external threat‑sharing communities. VirusTotal analysis recorded three detections out of ninety‑three scanned security vendors, reinforcing the suspicion of malicious activity. Additionally, Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating, indicating a high likelihood of abuse.

Given the combination of blocklist listings, multiple vendor detections, a zero trust score, and the absence of TLS protection, the domain should be treated as a confirmed phishing infrastructure. Defenders are advised to block the domain and its resolved IP address at perimeter firewalls and DNS filtering layers. Continuous monitoring of the associated IP range for new activity is recommended, as Cloudflare‑hosted infrastructure can be repurposed for other campaigns. Because the site is offline, further forensic analysis of the content is limited; however, the existing indicators provide sufficient evidence to warrant inclusion in internal blacklists and threat‑intel feeds.