checkfort[.]info
“MrBeast x Fortnite - Exclusive Event”
Résumé des preuves
Analysis indicates that the domain checkfort.info was registered on March 13, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently delegated to the Cloudflare authoritative nameservers harlan.ns.cloudflare.com and yolanda.ns.cloudflare.com. DNS resolution points to the IP address 172.67.219.206, which belongs to Cloudflare’s edge network and therefore masks the underlying hosting infrastructure. The domain is listed on one external security blocklist and is actively blocked by the PhishDestroy service, confirming that it is being treated as malicious by at least one reputable anti‑phishing repository. A VirusTotal scan shows that 15 out of 95 participating security vendors have flagged the domain as malicious, providing independent corroboration of its threat status.
The risk rating assigned by internal monitoring is high, and the operational status remains active as of the report date, July 22, 2026. No public page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts are available in the current intelligence set, leaving the exact content of the hosted page unverified. Likewise, no indicators from Open Threat Exchange or additional blocklists have been observed.
Given the combination of recent registration, Cloudflare‑based hosting, multiple vendor detections, and inclusion on a phishing‑specific blocklist, defenders should treat checkfort.info as a confirmed phishing infrastructure. Recommended actions include immediate DNS‑level blocking, updating intrusion‑prevention signatures to flag any outbound connections to the IP 172.67.219.206 when associated with the domain, and monitoring for newly created domains that share the same registrar or nameserver pair. Continuous re‑evaluation is advised in case further evidence, such as page content or SSL fingerprints, becomes available.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260722-C26B1C
Texte intégral des preuves
Policy Violations: Explicit policy to immediately suspend domains used for phishing, 419 scams, identity fraud, malware distribution without prior notice
Applicable Laws: IT Act 2000 §§66C–66D (identity theft, cheating by personation), Indian Penal Code §420 / Bharatiya Nyaya Sanhita §318 (fraud)
Data Coverage
Renseignements sur la sécurité réseau
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
État du domaine
Accessible → Inaccessible
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
4 technologies identifiées avec une forte confiance
Analyse VirusTotal
Preuves archivées
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif