evm-op[.]netlify[.]app

Analysis of evm-op.netlify.app shows a domain hosted on Netlify that resolves to the IP address 63.176.8.218. The registration pathway indicates a Netlify‑provided account, and the domain currently lacks publicly resolvable nameserver records, suggesting reliance on Netlify’s internal DNS infrastructure. The site appears on a single security blocklist and is actively blocked by the PhishDestroy service, confirming that it has been identified by at least one reputable anti‑phishing organization.

VirusTotal records indicate that the URL was submitted to 91 scanning engines, none of which returned a detection at the time of scanning; however, the absence of detections does not constitute a safety assurance, especially given the domain’s classification as a generic phishing threat. The domain remains active as of the report date, August 06, 2026, and no additional intelligence such as page title, SSL certificate details, or HTTP response codes is available in the current dataset. Defenders should consider adding the IP address 63.176.8.218 to network‑level blocklists and enforce URL filtering policies that deny traffic to the evm-op.netlify.app hostname.

Continuous monitoring of Netlify‑hosted domains and periodic re‑scanning with threat‑intel platforms are recommended to detect any future changes in malicious behavior. Given the confirmed blocklist entry and the phishing classification, the domain should be treated as a high‑confidence threat pending further forensic examination.