cbevents[.]app

This domain, cbevents.app, is identified as a generic phishing threat designed to mimic legitimate corporate event pages under the guise of a Q4 Product Event. Analysis indicates the domain was crafted to deceive employees or partners into submitting sensitive credentials, likely through a fabricated login portal or registration form. The page title, Q4 Product Event, aligns with common corporate communication themes, increasing the likelihood of successful social engineering attacks against business users. Infrastructure analysis reveals the domain was registered through Vercel Inc. and resolves to the IP address 216.150.1.193. Detection metrics show 3 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on one security blocklist. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites. Technologies detected include Node.js, React, Vercel, Next.js, HSTS, and Webpack, suggesting a modern, dynamic web application designed to evade basic detection mechanisms. Users who visited cbevents.app should immediately revoke any credentials entered on the site, as they may have been compromised. It is recommended to monitor accounts associated with corporate or financial services for unauthorized activity. Organizations should update security blocklists to include this domain and its resolving IP, 216.150.1.193, to prevent further access. If the domain was accessed in a corporate environment, IT teams should conduct a forensic review to assess potential data exposure or lateral movement risks.