eventchecker-io[.]netlify[.]app

This domain is flagged as a credential harvesting phishing site under active investigation. Analysis indicates it is designed to mimic legitimate event verification portals, likely targeting users of professional networking or corporate event platforms. The specific threat involves collecting login credentials, session tokens, or personally identifiable information through fraudulent forms or cloned interfaces. Infrastructure analysis reveals the domain is hosted on Netlify, a legitimate platform often abused for phishing due to its free hosting and SSL capabilities. It resolves to IP address 35.157.26.135, which has no prior blocklist associations in this context. The SSL certificate is issued by DigiCert Inc, a trusted certificate authority, which may lend false legitimacy to the site. VirusTotal currently reports 0 detections out of 95 engines, indicating either recent deployment or evasion techniques. No creation date is publicly available, but the domain remains active and unflagged by major threat intelligence feeds. Mitigation requires immediate action from network defenders and end users. Organizations should block the domain and its resolving IP at the perimeter firewall and DNS level. Endpoint protection should be updated to detect and prevent access to eventchecker-io.netlify.app. Users who may have interacted with the site should be instructed to reset credentials for any accounts entered, enable multi-factor authentication, and monitor for unauthorized access. Security teams should review logs for connections to 35.157.26.135 and the domain, as well as any related Netlify-hosted subdomains. Given the lack of detections, manual verification of the site’s content is recommended for further classification.