eventchecker-ym[.]netlify[.]app

The domain eventchecker-ym.netlify.app is currently active and has been observed serving content through Netlify’s hosting platform. DNS resolution points to the IP address 35.157.26.135, and no authoritative nameservers were returned during lookup, indicating reliance on Netlify’s internal DNS infrastructure. The site was scanned by 91 VirusTotal vendors, none of which reported a detection; however, the absence of a detection does not constitute a security assurance. Classification as a generic phishing site derives from its inclusion in the phishing database, but no publicly available page title, brand target, or phishing kit details have been disclosed, leaving the exact content and victim lure unknown. The lack of page‑level analysis limits attribution of the specific social‑engineering vector, but the infrastructure pattern—Netlify‑hosted site with a distinct sub‑domain—matches recent trends of actors leveraging free hosting to reduce operational costs and evade takedown. Defenders should treat the domain as hostile: incorporate the domain and its resolved IP into blocklists, enforce DNS sinkholing, and monitor outbound traffic for connections to 35.157.26.135. Continuous re‑scanning with multiple malware engines is advised, as the threat posture may evolve. Incident response teams should also consider correlating any user‑reported credential submissions or login attempts to this domain for early detection of compromise attempts.