eventchecker-if[.]netlify[.]app

Analysis of eventchecker-if.netlify.app indicates the domain is currently active and resolves to the IPv4 address 63.176.8.218. Registration was performed through Netlify, a platform that provides static site hosting and automatic DNS configuration; the domain’s authoritative nameserver records could not be retrieved, which is consistent with Netlify’s managed DNS service that often hides underlying NS records. The domain has been listed on a single security blocklist and was explicitly blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing repository has identified it as malicious. VirusTotal reports that the site was scanned by 91 AV engines, none of which generated a detection.

While the lack of detections does not constitute evidence of benign behavior, it does indicate that the payload or page content has not yet been catalogued by those engines. No public SSL certificate information is available, and no HTTP status code or page title has been disclosed, leaving the surface‑level content unverified. Likewise, there are no recorded entries in Google Safe Browsing, OTX, or other reputation services within the supplied intelligence.

Defenders should treat the domain as a confirmed phishing indicator based on its blocklist presence and PhishDestroy classification. Recommended actions include adding the domain to internal deny lists, monitoring DNS queries for the 63.176.8.218 address, and applying outbound filtering rules that block HTTP/HTTPS traffic to the host. Continuous re‑evaluation is advised, as future scans may reveal additional malicious characteristics.