eventchecker-cl[.]netlify[.]app

Analysis of eventchecker-cl.netlify.app shows that the domain is actively being used for a phishing operation. The site was submitted to VirusTotal where it was examined by 91 independent scanning engines; none of the engines reported a detection at the time of analysis. While a clean result does not guarantee benign behavior, the lack of detections combined with other indicators strengthens the case for malicious intent. The domain is listed on three external security blocklists and has been actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services, confirming that multiple threat‑intelligence feeds have identified it as hostile.

No further public data such as registrar details, IP address, hosting provider, SSL certificate information, HTTP response codes, Safe Browsing verdicts, or Open Threat Exchange (OTX) references are currently available for this host, limiting the depth of technical attribution. Consequently, the remaining unknowns include the precise infrastructure layout, the underlying phishing kit, and the targeted brand or service, none of which have been disclosed in the present evidence set. Defenders should treat the domain as malicious and enforce existing web‑filtering policies to block any outbound connections or HTTP requests to eventchecker-cl.netlify.app.

Network monitoring solutions should be configured to alert on DNS queries for the domain, and endpoint protection platforms should be updated to include the domain in their deny lists. Security teams should also consider sharing the domain’s hash and blocklist identifiers with threat‑sharing communities to improve collective detection capability. Continuous re‑evaluation is advised, as additional indicators may emerge if the site’s content or hosting environment changes.