event-ethereal[.]com

This domain, event-ethereal.com, is currently flagged as an active crypto phishing threat. Registered on March 6, 2026, through Dynadot LLC, it remains operational despite returning an HTTP 403 status and a 504 Gateway time-out error page. Infrastructure analysis reveals the domain is hosted behind Cloudflare (AS13335), resolving to IP 188.114.96.3, with nameservers alexa.ns.cloudflare.com and randall.ns.cloudflare.com. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains, providing no definitive indication of intent on its own. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, which classify it as a crypto scam. Despite these warnings, no detections have been recorded on VirusTotal as of July 12, 2026, though this absence does not confirm safety. The Gridinsoft trust score of 0/100 further supports the assessment of malicious activity. The use of Cloudflare and HTTP/3 aligns with tactics observed in phishing campaigns, where threat actors leverage content delivery networks to obscure origin servers and evade takedowns. While the domain currently returns a 504 error, this may indicate temporary downtime or a deliberate evasion technique rather than abandonment. The registration age of four months suggests the campaign could still be in an active or dormant phase. Defenders should treat this domain as high-risk, particularly in environments handling cryptocurrency transactions. Monitoring for changes in HTTP status, DNS records, or SSL certificate updates may provide additional indicators of compromise. Blocking access to this domain at the network level is recommended until further evidence confirms its deactivation or remediation.