checker-makina[.]com

Analysis of checker-makina.com indicates that the domain was registered on 22 November 2025 through Dynadot LLC and is currently hosted on Cloudflare infrastructure, using nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. DNS resolution points to 142.250.184.228, an IP owned by Google LLC (AS15169) located in the United States. The SSL certificate presented is issued by Google Trust Services under the WE1 profile, which is typical for legitimate Google services, but the certificate alone does not authenticate the content. HTTP requests return a 404 status code and the page title reported by scanners is “Google”, while the domain is explicitly listed as impersonating the Gmail brand. The site was detected by VirusTotal, where two of ninety‑five scanning engines flagged it as malicious, and it appears on two independent blocklists (PhishDestroy and ScamSniffer).

Technology fingerprints include Cloudflare and HTTP/3 support. The domain has been taken offline as of the report date, but historical evidence suggests a brief period of active abuse. The observable indicators collectively point to a brand‑impersonation attempt targeting Gmail users. The presence of a Google‑issued certificate and a page title matching a legitimate Google service may be intended to increase credibility, while the 404 response suggests the malicious payload may have been removed or the site was quickly shut down.

The limited number of vendor detections indicates that the threat was either short‑lived or evaded many scanners, but the inclusion on dedicated anti‑phishing blocklists confirms malicious intent. Defenders should continue to block the domain at network perimeter and update URL filtering policies. Incident response teams should monitor for any resurgence of the domain or related subdomains, and consider reporting the registration to the registrar for potential abuse termination.