check-trust[.]net

check-trust.net was registered through Namecheap Inc on July 27 2026 and is delegated to the Cloudflare name servers love.ns.cloudflare.com and marty.ns.cloudflare.com. The domain resolves to the IP address 188.114.96.3, a Cloudflare‑owned host that frequently serves malicious content for short‑lived campaigns. The domain appears on a single public blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one anti‑phishing service has observed malicious activity associated with the domain.

VirusTotal has processed the domain with 91 antivirus and URL scanners; none of the engines reported a detection at the time of analysis, but the absence of detections does not constitute proof of legitimacy. No additional intelligence such as SSL certificate details, HTTP response codes, or page title has been published, leaving the exact content and phishing technique employed by the site unknown. The lack of publicly available page metadata, combined with the recent registration date, suggests a typical “throw‑away” phishing infrastructure that may be used to host credential‑stealing pages for a brief window.

Defenders should add 188.114.96.3 to network‑level deny lists, enforce DNS filtering for the domain, and monitor traffic for any outbound connections to the host. Continuous re‑scanning of the domain on VirusTotal or similar services is advised, as threat actors often modify payloads after initial deployment. Organizations should also consider tightening email authentication and user awareness training to reduce the risk of credential compromise should users encounter URLs that resemble legitimate services.