checksart[.]top

The domain checksart.top was registered on 21 February 2026 and currently resolves to the IPv4 address 94.26.255.31, which is announced by AS49505 JSC Selectel and geolocated to Russia. The site presented a page titled “Secure SSN Number Verify in USA”, indicating an attempt to harvest Social Security numbers from United States residents. The TLS certificate associated with the domain received an R10 rating, which reflects a low trust score and is typical for malicious infrastructure. The domain has been added to the PhishDestroy blocklist and appears on one additional security blocklist, confirming that at least one industry‑wide feed is actively blocking it.

VirusTotal analysis shows that a single out of ninety‑five scanning engines flagged the domain, providing limited but concrete vendor detection. The service was taken offline at the time of reporting, and no active HTTP response was observed. Evidence confirms that the infrastructure is hosted on a Russian provider and that the domain is newly created, characteristics frequently observed in credential‑stealing campaigns.

However, the low detection count on VirusTotal suggests that the payload or hosting details have not been widely shared with scanning services, and the absence of additional public intelligence such as Safe Browsing or Open Threat Exchange entries leaves the broader distribution unknown. Defenders should continue to block checksart.top at network perimeter devices, enforce DNS filtering that includes the PhishDestroy feed, and monitor for any outbound connections to 94.26.255.31. Incident response teams should treat any authentication attempts or credential submissions linked to the domain as compromised, and users should be advised that the site is malicious and should not be accessed.