eventchecker-vy[.]netlify[.]app

Analysis of eventchecker-vy.netlify.app indicates that the domain is actively serving a generic phishing campaign as of the report date, July 25 2026. The domain is hosted on Netlify, as reflected in the registrar information, and resolves to the IPv4 address 63.176.8.218. Netlify’s platform typically provides shared hosting and CDN services, which can obscure the true origin of the malicious payload. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, confirming that at least one independent threat‑intel source has identified it as malicious. VirusTotal records show that the domain was submitted for scanning and evaluated by 91 antivirus and URL‑reputation vendors; none of the vendors raised a detection at the time of scanning.

The absence of detections does not constitute a safety assurance, as the data set may be incomplete or the payload may be evading current signatures. No nameserver information is available, and no SSL certificate details, HTTP response codes, or page‑title metadata have been disclosed, limiting the depth of technical fingerprinting. Consequently, the precise delivery mechanism, targeted brand, or phishing kit employed remain unknown. Defenders should treat eventchecker-vy.netlify.app as a malicious indicator and block it at network perimeter, DNS, and endpoint layers.

Updating web‑filtering and URL‑reputation products with the domain, as well as adding the associated IP address 63.176.8.218 to block lists, will mitigate inadvertent user exposure. Continuous monitoring for changes in DNS resolution, SSL deployment, or new detections on VirusTotal and other reputation services is recommended. Incident response teams should also review logs for any attempted connections to this host and investigate potential credential compromise if users have interacted with the site.