eventchecker-qx[.]netlify[.]app

Analysis indicates that eventchecker-qx.netlify.app resolves to the IPv4 address 35.157.26.135. The IP is part of Netlify’s shared hosting pool, which aligns with the domain’s registration via Netlify’s platform. The domain does not have publicly visible authoritative name servers; the NS query returns NS_NOT_FOUND, suggesting reliance on Netlify’s default DNS configuration. VirusTotal records show the domain was submitted to 91 scanning engines, none of which reported a detection at the time of the scan. While the lack of detections does not confirm benign intent, it also provides no concrete malicious indicator. The threat classification assigned to the domain is generic_phishing, and its status is marked as active and under investigation. No additional intelligence such as observed payloads, credential harvesting pages, or associated malware kits has been disclosed. Consequently, the current evidence base consists primarily of infrastructure attributes and the phishing label. Defenders should treat the domain as potentially malicious until further corroborating activity is observed. Recommended actions include adding the host to URL filtering blocks, monitoring DNS queries for the IP address 35.157.26.135, and employing heuristic or behavior‑based detection to capture any credential‑stealing attempts that may originate from the site. Continuous re‑evaluation is advised as new telemetry becomes available.