eventchecker-v8[.]netlify[.]app

The domain eventchecker-v8.netlify.app is assessed as a high-risk generic phishing domain. It poses a significant threat to users by mimicking legitimate websites to steal sensitive information, such as login credentials and financial data.

Analysis indicates that the domain is registered through Netlify and is currently active. Despite not being flagged on VirusTotal (0/95 detections), the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by DigiCert Inc, specifically the DigiCert Global G2 TLS RSA SHA256 2020 CA1. The domain resolves to the IP address 35.157.26.135, which is located in Germany and is associated with Amazon.com, Inc. (AS16509). The lack of detection on VirusTotal and the presence on multiple blocklists suggest that the domain may be newly established or has evaded broader detection mechanisms.

To mitigate the risks associated with this generic phishing domain, users are advised to avoid clicking on any links or entering personal information on the site. Organizations should update their security policies to include the domain in their blocklists and educate employees about the signs of phishing attacks. Network administrators can implement DNS filtering and IP blocking to prevent access to the domain from organizational networks. Additionally, regular security audits and monitoring of network traffic can help identify and block any attempts to access the domain.