cheekee[.]quest

Analysis of cheekee.quest indicates an active credential phishing domain registered on June 12, 2026, through NAMECHEAP INC. The domain is flagged by 6 of 91 security vendors on VirusTotal and appears on one security blocklist, with a Gridinsoft trust score of 0/100. Infrastructure analysis reveals Cloudflare nameservers (dion.ns.cloudflare.com, isla.ns.cloudflare.com) and resolution to IP 172.67.206.139, hosted in Canada under Cloudflare, Inc. The domain currently returns an HTTP 301 redirect and a 523 error (Origin is unreachable), suggesting either a misconfigured backend or deliberate evasion tactics. AlienVault OTX records the domain in four threat intelligence pulses, reinforcing its association with credential phishing campaigns. The SSL certificate is issued by Let's Encrypt (serial E8), a common choice for both legitimate and malicious domains. Defenders should treat this domain as high-risk due to its recent registration, confirmed phishing classification, and active blocklist presence. No specific brand impersonation is confirmed in available data; the exact content of the phishing page remains unanalyzed. Immediate blocking at the DNS or proxy level is recommended, with monitoring for related infrastructure (e.g., Cloudflare IPs, Let's Encrypt certificates) to identify potential follow-up domains.