kellyclaudeevent[.]org

The domain kellyclaudeevent.org was registered on February 27, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted on Cloudflare infrastructure, resolving to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The domain is configured without an SSL/TLS certificate, exposing any HTTP traffic to potential interception. DNS resolution points to Cloudflare name servers chad.ns.cloudflare.com and rita.ns.cloudflare.com. The only visible page title returned during the brief live check was "x.com/", offering no legitimate branding or contextual clues.

The site was taken offline shortly after detection, and its current HTTP status is unavailable. Multiple security products have taken defensive action: PhishDestroy, MetaMask, and SEAL have each blocked the domain, and it appears on three independent security blocklists, indicating that at least three separate threat‑intelligence feeds have identified it as malicious. VirusTotal analysis shows that the domain was scanned by 93 antivirus and URL‑reputation vendors, and none have issued a detection flag at the time of scanning, though the absence of a flag does not constitute a safety guarantee. The combination of recent registration, lack of encryption, generic page title, and rapid takedown suggests a short‑lived phishing campaign, possibly aimed at exploiting brand‑agnostic trust or redirecting victims to another malicious endpoint.

Uncertainty remains regarding the exact phishing vector, target audience, and whether any payloads were delivered before the takedown. Defenders should continue to block kellyclaudeevent.org at perimeter and endpoint layers, monitor for any residual traffic to its IP address, and consider adding the domain to internal allow‑list exclusions only after thorough verification. Ongoing observation of the associated IP and Cloudflare account may reveal reuse in future campaigns, so periodic re‑scanning with URL‑reputation services is recommended.