eventchecker-xe[.]netlify[.]app

The domain eventchecker-xe.netlify.app is currently active and has been classified as a generic phishing site under investigation. Infrastructure analysis shows the domain is hosted on Netlify, with the A record resolving to 63.176.8.218. Netlify’s shared hosting environment often uses a pool of IP addresses; the specific address is not known to be associated with other malicious activity, but its presence on a phishing blocklist warrants caution. The domain was submitted to VirusTotal, where 95 scanning engines evaluated the content and none reported a detection. While the lack of detections may reflect evasion or a clean payload, it does not constitute evidence of safety. The domain appears on a single external blocklist and is explicitly listed by PhishDestroy, indicating that at least one security provider has observed phishing‑related behavior. Nameserver information could not be retrieved (NS_NOT_FOUND), which is common for CDN‑fronted sites and may hinder rapid attribution. No SSL/TLS details, HTTP status codes, or page‑title information are presently available, limiting the ability to assess the site’s transport security or visible content. Given the limited but concrete indicators—hosting on Netlify, resolution to 63.176.8.218, presence on a phishing blocklist, and a clean VirusTotal scan—defenders should treat the domain as suspicious. Recommended actions include adding the domain to network‑level deny lists, monitoring DNS queries for the IP address, and performing periodic re‑scans with updated threat‑intel feeds. Analysts should also seek to capture live page content to confirm the phishing vector and verify whether the site employs TLS with a valid certificate. Until further evidence emerges, the domain remains a potential threat and should be handled with the same caution applied to known phishing infrastructure.