event-ventuals[.]live

The domain event-ventuals.live is currently flagged as an active phishing infrastructure impersonating Eventbrite, a widely used event management and ticketing platform. Analysis indicates this domain is designed to harvest user credentials, payment details, or personal information under the guise of legitimate event-related communications. The campaign remains under investigation, with no confirmed brand attribution beyond the thematic targeting of event services. Infrastructure analysis reveals the domain was registered on June 19, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk registrations. It resolves to the IP address 188.114.97.3, which has not been widely flagged in threat intelligence feeds at the time of this report. VirusTotal detection metrics show 0 of 95 security vendors have flagged the domain as malicious, suggesting either a newly launched campaign or effective evasion techniques. The SSL certificate is issued by Google Trust Services, providing a superficial layer of legitimacy to unsuspecting users. Current status indicates the domain remains operational and unblocked by major security providers. Organizations and end users are advised to treat all communications originating from event-ventuals.live as malicious. Network administrators should implement DNS-based blocking for the domain and its resolving IP address. Users who may have interacted with the domain should initiate credential rotation for any accounts accessed during the potential exposure window. Continuous monitoring of related infrastructure is recommended, as additional domains or IPs may emerge in this campaign.