MALICIOUS — CRITICAL
Pemeriksaan phishing dan keamanan checkerfinanc.com
checkerfinanc[.]
The domain checkerfinanc.com is currently flagged as an active crypto-asset phishing portal.
- VirusTotal
- 17/91
- Blocklists
- 3 · MetaMask, ScamSniffer
- Ketersediaan
- Konten tidak tersedia · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
checkerfinanc.com — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Genericcrypto; Jenis penipuan: Generic Phishing. Ringkasan bukti: VirusTotal 17/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLScan malicious verdict; Spamhaus DBL_PHISH; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 95/100. Registrar: Fewmoretaps OU d/b/a T….
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Analysis
The domain checkerfinanc.com is currently flagged as an active crypto-asset phishing portal. Analysis indicates the site specifically targets financial institutions by impersonating a legitimate digital asset unification platform. The page title, 'Checker - Unifying digital assets market for financial institutions,' suggests an attempt to deceive employees or clients of banks, investment firms, or other financial entities into disclosing sensitive credentials or transferring digital assets under false pretenses. No legitimate brand affiliation has been verified, and the domain exhibits multiple technical indicators consistent with fraudulent infrastructure. Infrastructure analysis reveals the domain was registered through Fewmoretaps OU d/b/a Trustname.com on May 20, 2026, an anomalous future date that may indicate domain generation algorithm manipulation or administrative error. It resolves to the IP address 188.114.96.3 and is secured with a Let's Encrypt SSL certificate, a common tactic to lend superficial legitimacy. The domain is detected by 17 of 95 security vendors on VirusTotal and appears on four independent security blocklists, including MetaMask, PhishDestroy, SEAL, and ScamSniffer. A Gridinsoft trust score of 0/100 further corroborates its malicious classification. Detected technologies include Framer Sites, React, jQuery, Google Hosted Libraries, Cloudflare Browser Insights, and Cloudflare network services, which are frequently leveraged to obfuscate malicious activity behind legitimate infrastructure. As of the latest assessment, checkerfinanc.com remains active and poses a high risk to financial sector entities and individual users. Organizations are advised to implement immediate DNS-level blocking for the domain and its associated IP address. Network administrators should monitor for connections to 188.114.96.3 and review logs for any prior interactions. End users should be alerted to avoid accessing the site, and any credentials entered on the platform should be considered compromised. Financial institutions are recommended to conduct internal awareness campaigns highlighting the threat of crypto-asset phishing schemes and to verify all digital asset transfer requests through out-of-band authentication channels.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Cakupan data12 recorded checks
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 7 identified
Framer is a no-code web design platform for designing and publishing responsive websites.
www.framer.com Keyakinan 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org Keyakinan 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Keyakinan 100%Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.
developers.google.com Keyakinan 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of checkerfinanc.com · checked Jun 26, 2026
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260521-0E275B Recipient: abuse@trustname.com Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.