eventchecker-te[.]netlify[.]app

This domain, eventchecker-te.netlify.app, is an active phishing infrastructure hosted on Netlify's platform and remains operational as of July 22, 2026. Infrastructure analysis reveals the domain is not associated with any valid nameservers, resolving instead to the IP address 63.176.8.218. While the domain has been scanned by 95 security vendors on VirusTotal, none currently flag it as malicious, though this absence does not confirm safety. Defenders should note that the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, indicating confirmed malicious activity targeting users.

The domain's registration through Netlify provides limited visibility into its origin, as the platform is commonly used for both legitimate and malicious deployments. The lack of nameserver records (NS_NOT_FOUND) suggests an atypical or obfuscated configuration, which is consistent with phishing infrastructure designed to evade detection or takedown efforts. The resolving IP, 63.176.8.218, has not been linked to additional malicious domains in the available data, but defenders are advised to investigate its historical associations and current reputation. No specific brand, scam type, or phishing kit has been identified in the available evidence, and the exact content of the site remains unanalyzed.

Defenders should treat this domain as high-risk due to its presence on multiple blocklists and its active status. Immediate action is recommended, including blocking the domain at the network level, monitoring for related infrastructure, and reporting the domain to Netlify's abuse team for takedown. Further analysis of the site's content and behavior is necessary to determine the precise threat actor objectives and potential victim impact.