eventchecker-1531[.]netlify[.]app

Analysis of eventchecker-1531.netlify.app indicates a generic phishing domain hosted on Netlify infrastructure, now offline. The domain was created on June 24, 2026, and resolved to IP 63.176.8.218 (DE, AS16509 Amazon.com, Inc.). As of the report date, the domain returns an HTTP 404 status with a 'Site not found' page title, suggesting it may have been taken down or abandoned. Infrastructure analysis reveals the use of Netlify hosting and HSTS, with an SSL certificate issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1).

Nameservers are currently unresolvable (NS_NOT_FOUND), which may indicate post-compromise remediation or infrastructure dismantling. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is flagged by one of 91 security vendors on VirusTotal. Gridinsoft assigns a trust score of 0/100, reinforcing its classification as malicious. Defenders should treat this domain as a confirmed phishing indicator.

Given its offline status, no active payload or brand impersonation has been verified. If historical logs or proxy data indicate user interaction with this domain, review for credential exposure or secondary payload delivery. Blocklist integration is recommended for proactive defense, and monitoring for re-registration or DNS reactivation is advised.