evmcheck[.]netlify[.]app

This domain, evmcheck.netlify.app, poses a high-risk threat by impersonating a legitimate EVM security portal. The site is designed to trick users into providing sensitive information such as login credentials, private keys, or other personal data, which can be used for fraudulent activities or identity theft.

Infrastructure analysis reveals that the domain resolves to the IP address 63.176.8.218, which is located in Germany and is part of the AS16509 network operated by Amazon.com, Inc. Despite being on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL, the domain has not been flagged by VirusTotal, with 0 out of 95 detections. The SSL certificate is issued by DigiCert Inc and is a DigiCert Global G2 TLS RSA SHA256 2020 CA1. The domain is registered through Netlify, and it remains active as of the latest assessment.

If users have visited evmcheck.netlify.app, they are advised to immediately change any passwords or credentials that may have been entered on the site. Additionally, users should monitor their accounts for any unauthorized activity and consider enabling two-factor authentication (2FA) for added security. It is also recommended to run a full system scan using reputable antivirus software to ensure that no malicious software has been installed. Users should report the incident to their security team or service provider and avoid clicking on any links or downloading any files from the site in the future.