checkmyperson[.]com

This domain, checkmyperson.com, is flagged as a generic phishing infrastructure targeting users of the classifieds platform Kleinanzeigen. Analysis of the page title 'Kleinanzeigen - Anmelden' confirms the domain is impersonating the legitimate login portal of the German marketplace to harvest user credentials. No specific drainer kit signatures have been identified at this stage, but the mimicked interface aligns with credential phishing tactics observed in prior Kleinanzeigen-themed campaigns. Infrastructure analysis reveals the following technical indicators: the domain currently resolves to IP address 172.67.202.23, with a VirusTotal detection score of 0/95, indicating no antivirus engines have flagged it as malicious. The domain was registered on July 04, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with bulletproof hosting and low-reputation domains. Google Safe Browsing status remains unconfirmed, and no blocklist entries have been recorded as of this report. The creation date discrepancy (2026) suggests either a typographical error in registration records or an attempt to evade temporal-based detection mechanisms. The domain remains active and under investigation, with no takedown actions initiated at this time. While the lack of detections on VirusTotal reduces immediate visibility, the combination of a spoofed login page, recent registration via a high-risk registrar, and an anomalous creation date elevates the risk profile. Users are advised to verify domain authenticity before entering credentials, particularly on pages requesting Kleinanzeigen login details. Organizations should monitor network traffic to 172.67.202.23 and consider blocking the domain at the DNS or proxy level pending further analysis. The absence of detections does not preclude malicious intent; continuous monitoring is recommended.