eventchecker-bk[.]netlify[.]app

Analysis of eventchecker-bk.netlify.app shows the domain is hosted on Netlify infrastructure and resolves to the IPv4 address 63.176.8.218. The domain’s authoritative name servers could not be retrieved, indicating that standard DNS queries for NS records returned no results. Netlify’s platform is frequently leveraged for short‑lived malicious sites because of its rapid deployment model and free tier. The domain remains active as of the report date, and a VirusTotal scan involving 91 security vendors returned no current detections; this absence does not constitute a safety indication. The available evidence—hosting on a reputable cloud provider, lack of visible name‑server data, and the generic_phishing classification—suggests the site is being used for credential‑harvesting or similar phishing activity, though the specific payload or targeted brand has not been disclosed. Uncertainty remains regarding the exact content served, the presence of any additional infrastructure such as redirect chains, and whether the domain is part of a broader campaign. Defenders should block resolution to 63.176.8.218, monitor Netlify‑hosted subdomains for similar patterns, and incorporate the domain into URL filtering and email security policies. Continuous re‑evaluation is recommended as new intelligence becomes available.