str-event[.]live

Analysis of the domain str-event.live shows that it was registered on 21 February 2026 and is currently offline. The site resolved to the IP address 104.21.40.91, which is hosted by Cloudflare (AS13335) and geolocated to the United States. The domain appears on a single public blocklist and is explicitly listed by the PhishDestroy blocklist provider. VirusTotal scans recorded 11 detections out of 93 scanners, indicating that multiple security engines flagged the host as malicious.

The SSL certificate presented is identified as “WE1”, confirming the use of TLS but offering no additional trust signals. The page title returned by the HTTP response is identical to the domain name, “str-event.live”, and no further content details have been captured. The combination of recent registration, Cloudflare hosting, blocklist presence, and multiple vendor detections points to a typical generic phishing infrastructure. However, the limited number of blocklist entries and the absence of publicly documented phishing kit or targeted brand means the full scope of the campaign cannot be confirmed.

Defenders should continue to block the domain and its IP at perimeter defenses, monitor for any re‑activation attempts, and add the domain to internal threat intelligence feeds. Ongoing observation of related hostnames served from the same Cloudflare IP may reveal additional malicious actors. Until further evidence emerges, the domain should be treated as a confirmed phishing site with elevated risk.