checker[.]mangonets[.]network

The domain checker.mangonets.network is a confirmed phishing site engaged in brand impersonation targeting Google. It was designed to deceive users into believing they were interacting with a legitimate Google service, likely via email-based scams, but did not deploy a crypto drainer kit. As of the latest verification, checker.mangonets.network has been taken offline.

Technical analysis shows that checker.mangonets.network was flagged by 2 of 95 security vendors on VirusTotal, including G-Data and Gridinsoft, which assigned it a trust score of 0/100. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on February 21, 2026, and resolved to the IP address 142.250.185.196, hosted on Google LLC's infrastructure (AS15169). It appeared on 2 security blocklists, PhishDestroy and ScamSniffer, and used an SSL certificate issued by WE2. The observed page title was 'Google', and its nameservers were dns11.parkpage.foundationapi.com and dns12.parkpage.foundationapi.com. Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with checker.mangonets.network should immediately change any passwords entered on the site, particularly for Google accounts, and enable two-factor authentication (2FA) if not already active. Monitor accounts for unauthorized activity and report any suspected fraud to the impersonated brand's official support channels. To report the phishing domain, submit it to Google's Safe Browsing Transparency Report, PhishTank, or the Anti-Phishing Working Group (APWG). If financial or personal data was exposed, consider contacting local cybercrime authorities for further guidance.