checkpoint-access.com
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Not checked: checkpoint-access.com showed the file scanner only a script, not its page.
Description of checkpoint-access.com
The domain checkpoint-access.com appears to present itself as an access or verification page rather than a full public website. Based on the domain name and the screenshot, it seems designed to prompt visitors to complete an additional verification step before proceeding, with language suggesting terminal or PowerShell interaction.
The visible page content does not identify a clear business, publisher, or legitimate service operator. Instead, it shows a workflow labeled as additional verification and instructs the user to open Windows PowerShell and paste a copied code, which is not typical of ordinary website login or anti-bot verification flows.
Based on the available page content, this site appears to function as a gated access or verification-themed landing page with unclear ownership and purpose.
Safety Assessment for checkpoint-access.com
Several scan signals indicate elevated risk at the time of this scan. The domain was flagged by 9 security engines, with detections including phishing, malware, and other suspicious classifications. In addition, the domain is extremely new, having been registered only 1 day before the scan, which can increase uncertainty because newly created domains are commonly used in short-lived campaigns.
The screenshot adds further concern. Rather than showing a standard CAPTCHA or routine sign-in page, it instructs the visitor to open Windows PowerShell, paste a copied verification code, and execute commands locally. That behavior is highly unusual for legitimate website verification and may be consistent with social-engineering tactics intended to get users to run commands on their own device.
Although some blacklist and malware-scan sources did not detect active threats at the time of this scan, the multi-engine detections, very recent registration, lack of established reputation, and the command-execution prompt together suggest meaningful risk. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that, at the time of this scan, was set to expire on 2027-01-30. It appears to be served through Cloudflare infrastructure, with Cloudflare nameservers and an observed server IP in Toronto, Canada. The reported web server was Cloudflare, which may indicate reverse-proxying or CDN protection rather than direct origin exposure.
DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from DNSSEC validation. No malicious files, external links, or iframe references were identified in the limited page scan, but the visible page behavior remains a concern because it attempts to guide the user into running local system commands.
Share your experience with this website. Was it safe? Did you encounter any issues?