eventblaze[.]net

The domain eventblaze.net was registered on 23 February 2026 through NiceNIC International Group Co., Limited and points to the Cloudflare‑owned address 188.114.96.3 (AS13335, United States). The authoritative nameservers are gemma.ns.cloudflare.com and grant.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and edge services. A HTTP request to the host returns an offline status, and no TLS certificate is presented, confirming the site is not serving encrypted content at the time of analysis. VirusTotal records show that four of ninety‑three scanning engines have flagged the domain, and the host appears on three public blocklists, specifically PhishDestroy, MetaMask, and SEAL.

The page title returned by the live endpoint is “Country Decor, Craft Ideas, Comfort Food, and Antique Appraisals – Country Living Magazine”, which is unrelated to any known legitimate brand and suggests a content‑spoofing tactic typical of generic phishing campaigns. Taken together, the registration timeline, Cloudflare hosting, lack of SSL, blocklist listings, and partial VirusTotal detections provide sufficient evidence that eventblaze.net is being leveraged for phishing or credential‑harvesting activities. However, because the site is currently offline and no payload or form details have been captured, the exact phishing vector, targeted brands, and victim demographics remain uncertain.

Defenders should immediately add eventblaze.net to URL filtering and sink‑hole rules, monitor for any resurrection of the host, and consider correlating outbound traffic to the 188.114.96.3 address with user authentication attempts. Continuous re‑scanning of the domain with sandbox and endpoint detection tools is advised to capture any future malicious payloads. Organizations using web‑proxy or secure web‑gateway solutions should enforce blocklist updates that include the three identified blocklists to reduce exposure.