checker-chog[.]com

This domain, checker-chog.com, is identified as a credential harvesting phishing site designed to mimic legitimate login portals. Analysis indicates the infrastructure was specifically engineered to target users of Cloudflare-protected services, leveraging the platform's reputation to bypass initial security filters. The site employed HTTP/3 protocol and a valid SSL certificate issued by Google Trust Services to create an illusion of legitimacy while harvesting sensitive authentication credentials. Evidence supporting this classification includes detection by 3 of 95 security vendors on VirusTotal, presence on one operational blocklist, and registration through Dynadot LLC on November 26, 2025. Infrastructure analysis reveals the domain resolved to 188.114.96.3 and displayed a Cloudflare 504 gateway timeout error, suggesting either takedown or temporary deactivation. The domain's recent creation date and immediate malicious activity indicate a short-lived, high-velocity phishing campaign. Users who visited checker-chog.com should immediately revoke any entered credentials, particularly for accounts associated with Cloudflare services or platforms mimicked by the phishing page. Monitor all accounts linked to the email address used on the site for unauthorized access attempts. Implement multi-factor authentication where available, and verify the legitimacy of any unexpected login verification requests. Network administrators should block the domain and associated IP address in perimeter security controls to prevent future exposure.