events-amnis[.]xyz

The domain events-amnis.xyz is flagged as a high‑risk generic phishing infrastructure. It is currently active and serves an HTTP 403 status code, which blocks content retrieval and suggests intentional denial of access to casual browsers. The domain was created on May 10 2026 and is registered with Dynadot LLC. A Let’s Encrypt certificate (issuer E7) secures the TLS handshake, confirming that the site presents a valid HTTPS endpoint.

Technical resolution shows that events-amnis.xyz resolves to the IP address 188.114.96.3, which belongs to CloudFlare, Inc. and is geolocated in Canada. The domain uses CloudFlare name servers (alexa.ns.cloudflare.com and kayden.ns.cloudflare.com), indicating that the operator is leveraging a reputable CDN to hide the true origin of the service. No additional IP aliases were observed.

Independent detection platforms have recorded the domain on multiple blocklists. PhishDestroy has listed it as malicious, and AlienVault OTX includes it in one threat‑intelligence pulse. VirusTotal reflects a mixed verdict, with five out of ninety‑five security vendors flagging the domain as suspicious. Gridinsoft assigns a trust score of 0 / 100, reinforcing the perception of malicious intent.

Given the observed indicators, defenders should treat events-amnis.xyz as a phishing threat. Immediate actions include adding the domain and its resolved IP 188.114.96.3 to network deny lists, configuring web proxies to block HTTPS traffic to the host, and monitoring DNS queries for the associated CloudFlare name servers. Because the site returns a 403 response, further automated content analysis is limited; however, continued passive DNS and SSL certificate monitoring can reveal any future changes in hosting or certificate issuance.