abyss-event[.]com

The domain abyss-event.com has been identified as a credential harvesting phishing panel targeting users of event management platforms. Analysis indicates the site is designed to mimic legitimate event administration interfaces, likely to deceive users into submitting login credentials or sensitive account details. The domain is currently offline, though prior activity suggests it operated as an active phishing endpoint. Infrastructure analysis reveals the domain was registered through NameCheap, Inc. on February 21, 2026, and resolves to the IP address 104.21.35.30. Detection metrics show the domain was flagged by 1 of 95 security vendors on VirusTotal, appears on a single security blocklist, and holds a Gridinsoft trust score of 0 out of 100. The site employed Vue.js for frontend development, used Cloudflare for hosting and DDoS mitigation, and supported HTTP/3 for enhanced performance. The SSL certificate was issued by Google Trust Services, a common tactic to lend superficial legitimacy to malicious domains. Current status indicates the domain has been taken offline, though residual risk remains due to the potential for re-deployment under a new domain or IP. Organizations are advised to monitor for similar phishing patterns, particularly those impersonating event management or administrative panels. Network administrators should block the IP 104.21.35.30 and domain abyss-event.com at the perimeter, and review logs for prior connections to this endpoint. End-users should be trained to recognize phishing indicators, such as mismatched URLs, unexpected login prompts, and requests for sensitive information outside of verified channels.