conference-event[.]live

The domain conference-event.live is currently flagged as a credential harvesting phishing site targeting event attendees and corporate users. Analysis indicates the domain is presently offline, though it was operational until recent takedown measures were applied. No specific brand impersonation has been confirmed, but the generic event-themed domain suggests broad targeting of conference and seminar participants. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3, which is part of a content delivery network known for masking malicious infrastructure. Security vendors have flagged this domain, with 4 out of 95 engines on VirusTotal detecting it as malicious. The domain appears on two security blocklists, including PhishDestroy and OISD, and employs Cloudflare services alongside HTTP/3 and Cloudflare Browser Insights for traffic obfuscation. The SSL certificate is issued by Google Trust Services, adding a layer of legitimacy to deceive users. Current status confirms the domain is offline, though historical data suggests it may resurface under similar infrastructure. Organizations are advised to block the domain and associated IP at perimeter defenses, monitor for related subdomains or typosquatting variants, and conduct retrospective log analysis for connections to 188.114.96.3. Security teams should also review registrar patterns and certificate transparency logs for similar event-themed domains registered through NiceNIC, as this registrar has been linked to multiple credential harvesting campaigns.