events-sceptre[.]xyz

The domain events-sceptre.xyz was registered on March 13, 2026 through Dynadot LLC and is presently classified as a generic phishing site. The only publicly visible artifact is the page title “events-sceptre.xyz | 504: Gateway time-out”, which indicates a server‑side timeout response. No additional content has been observed, so the specific phishing lure or target audience remains undefined.

Infrastructure analysis shows the domain resolves to IP address 104.21.9.146, which belongs to the Cloudflare network (AS13335) and is hosted in the United States. DNS resolution uses the Cloudflare authoritative nameservers and the site serves a valid Let’s Encrypt certificate (E7) over HTTP/3. An HTTP request to the root URL returns a 403 status, suggesting access restrictions or a deliberately hidden payload.

Threat intelligence flags the domain on three security blocklists and it is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal reports two of ninety‑five scanning engines flagging the domain as malicious, while the Gridinsoft trust score is 0 out of 100, reinforcing the high‑risk assessment. The combination of a low trust score, blocklist presence, and the generic phishing label indicates a concerted effort to deceive users, though the exact phishing vector (e.g., credential‑stealing page) has not yet been captured.

Defenders should add events-sceptre.xyz to network and email filters, enforce DNS‑level blocking, and monitor for any outbound connections to the associated Cloudflare IP. Continuous re‑scanning of the domain is advised, as the content may evolve from a timeout page to an active credential‑capture site. Organizations using automated threat‑intelligence feeds should prioritize this indicator given its high risk rating and recent creation date.