eventripple[.]org

This domain, eventripple.org, is currently classified as a high‑risk generic phishing site. Infrastructure analysis shows the authoritative nameservers hope.ns.cloudflare.com and khalid.ns.cloudflare.com, both hosted on Cloudflare’s network (IP 172.67.182.144, located in Canada). Registration was completed through Key‑Systems GmbH, and the TLS certificate is issued by Let’s Encrypt (identifier YE2). Google Safe Browsing flags the domain for social‑engineering content, and VirusTotal records 14 detections out of 91 scanning engines. The site returns HTTP 403 and presents the page title "Just a moment…". The domain is presently listed on one public blocklist and is actively blocked by the PhishDestroy feed. While the visible page content is limited to a generic placeholder, the combined telemetry indicates a deliberate phishing campaign. Defenders should add eventripple.org to web‑filter deny lists, monitor DNS queries for the associated Cloudflare IP range, and ensure that endpoint protection solutions incorporate the observed VirusTotal and Safe Browsing indicators. Ongoing observation is recommended to detect any evolution of the payload.