eventchecker-a4[.]netlify[.]app

This domain, eventchecker-a4.netlify.app, is presently active and has been identified as a generic phishing infrastructure. The host resolves to the IPv4 address 35.157.26.135, which belongs to Netlify’s shared hosting environment. Registration information indicates the domain was provisioned through Netlify, and the authoritative nameserver data is unavailable (NS_NOT_FOUND). The domain has been listed on a single security blocklist and is actively blocked by the PhishDestroy service, confirming that at least one defensive feed has taken mitigation action.

VirusTotal analysis shows that the site was scanned by 91 independent vendors, none of which reported a detection at the time of the scan; this absence of detections does not constitute a safety assurance. No additional intelligence such as Safe Browsing verdicts, OTX references, SSL certificate details, or HTTP response codes is available in the current dataset. The lack of publicly visible nameserver records hampers attribution of the hosting provider beyond the Netlify platform, and no SSL/TLS certificate metadata has been observed, which may indicate use of default Netlify certificates or an absence of HTTPS enforcement. Because the page content has not been captured, the specific lure or credential‑capture mechanism remains unknown.

Analysts should treat the domain as potentially malicious until further forensic evidence is obtained. Defenders should incorporate the domain into existing URL filtering rules, monitor outbound DNS queries for the IP 35.157.26.135, and ensure that any internal phishing detection mechanisms reference the PhishDestroy blocklist entry. Logging of HTTP requests to the domain, especially POST submissions, can provide insight into any data exfiltration attempts. Coordination with Netlify’s abuse contact may expedite takedown if the site is confirmed to host fraudulent content.