echo-messenger-app[.]netlify[.]app

PhishDestroy has identified echo-messenger-app.netlify.app as an active phishing site designed to trick users into thinking it's the legitimate Echo messaging app. The site mimics Echo's interface to harvest login credentials, posing a high risk of account takeover and data theft. Because it is hosted on Netlify's infrastructure, it benefits from a trusted-looking domain and a valid SSL certificate issued by DigiCert, making it harder for casual users to spot the fraud.

This domain was flagged based on multiple intelligence sources. VirusTotal shows 0 out of 95 security vendors detect it as malicious, which means it has not yet been widely blacklisted. However, it has already appeared on 3 security blocklists, indicating that some threat intelligence platforms have identified it as suspect. The site was registered through Netlify, a legitimate service often abused by phishers, and resolves to IP 63.176.8.218. The page title is "Echo," and the SSL certificate is from DigiCert Inc using the DigiCert Global G2 TLS RSA SHA256 2020 CA1 chain. The domain remains active at the time of this report.

If you have visited this site and entered any personal information, especially your Echo login credentials, you should change your password immediately and enable two-factor authentication on your account. Monitor your accounts for suspicious activity and consider running a security scan on your device. You can also report the domain to Netlify's abuse team to help take it down. Remember, always verify URLs before entering sensitive data and avoid clicking on unsolicited links.