eventchecker-c6[.]netlify[.]app

The domain eventchecker-c6.netlify.app has been flagged by multiple threat‑intelligence sources as part of an active credential‑harvesting operation. It appears on three independent security blocklists and is explicitly listed by PhishDestroy, MetaMask, and SEAL as a malicious host. VirusTotal records indicate that the domain was submitted to 91 scanning engines; at the time of analysis none of those engines returned a positive detection. This lack of a detection should not be interpreted as confirmation of safety, as the content may be transient or employ techniques that evade static analysis. The domain does not currently appear in Google Safe Browsing or Open Threat Exchange listings, which may reflect the rapid turnover typical of phishing infrastructure.

No TLS certificate was observed, and attempts to retrieve the site over HTTPS result in a connection reset, suggesting the operator may rely on HTTP‑only delivery. Public registrant data, hosting IP address, ASN, and SSL certificate details have not been disclosed in the current intelligence set, and no HTTP response codes or page‑title information are available. Consequently, the precise infrastructure supporting the domain cannot be profiled at this stage. The limited observable evidence points to a typical phishing‑type deployment that likely attempts to capture user credentials, although the targeted brand or service has not been identified.

Security teams should also audit email gateways for messages containing the string "eventchecker" or similar patterns, as the domain name suggests a possible event‑verification lure. Defenders should treat eventchecker-c6.netlify.app as a high‑confidence indicator of compromise. Recommended actions include adding the domain to network‑level blocklists, configuring web‑filtering solutions to deny any HTTP or HTTPS requests to the host, and monitoring DNS logs for queries to the domain.