eventchecker-5t[.]netlify[.]app

Analysis of eventchecker-5t.netlify.app shows that the domain is currently active and has been flagged by the PhishDestroy blocklist. Network resolution maps the hostname to IP address 63.176.8.218, a range commonly associated with Netlify’s shared hosting infrastructure. The domain was registered through Netlify, and its nameserver information is listed as NS_NOT_FOUND, indicating that standard DNS delegation data is unavailable or obscured.

The host appears on a single external security blocklist, reinforcing the likelihood of malicious intent, although the limited number of listings suggests that broader community awareness may still be developing. VirusTotal records indicate that the site was scanned by 91 antivirus and URL‑reputation vendors, none of which raised a detection at the time of scanning; this absence of alerts does not constitute evidence of safety, as many phishing sites evade static analysis and rely on dynamic content. No public SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts are presently available, leaving the surface‑level web fingerprint incomplete.

Consequently, the primary observable indicators are the hosting relationship with Netlify, the resolved IP address, the presence on a dedicated phishing blocklist, and the lack of vendor detections despite multiple scans. Defenders should prioritize adding eventchecker-5t.netlify.app to internal deny lists, monitor DNS queries for the IP 63.176.8.218 for any anomalous traffic patterns, and consider applying heuristic URL‑filtering rules that flag Netlify‑hosted domains lacking verified TLS metadata. Continuous re‑evaluation is advised, as the threat level remains under investigation and additional intelligence—such as page content analysis or user‑reporting—may emerge to clarify the malicious purpose of this infrastructure.