event-superform[.]com

Analysis of event-superform.com shows a recent registration (04 Dec 2025) through Dynadot LLC and immediate deployment behind Cloudflare’s network (nameservers alexa.ns.cloudflare.com and randall.ns.cloudflare.com). The domain resolves to 172.67.178.3, an address owned by AS13335 Cloudflare, Inc., located in the United States. An HTTPS connection presents a Google Trust Services / WE1 certificate, confirming a valid TLS handshake but offering no insight into the underlying content.

HTTP requests receive a 403 response, indicating that the web server is actively denying access, which aligns with the reported offline status. The domain is listed on two independent phishing blocklists, PhishDestroy and ScamSniffer, and three of ninety‑five VirusTotal scanners have flagged it as malicious, reinforcing the suspicion of phishing use. No additional technical artifacts such as page titles, brand references, or malware kits are available in the current dataset, leaving the exact payload or lure unknown.

defenders should block the domain at perimeter firewalls, update DNS sinkhole entries, and monitor for any outbound connections to the associated Cloudflare IP. Continued observation of the IP reputation and any future content changes is advised to detect potential re‑activation.