auth.checkgos.org

This scam campaign centers around a fraudulent lending operation using the "CheckGo" brand, operating through a network of 7 connected domains and 2 phone numbers (470-750-9964 and 470-750-9962). The campaign employs a sophisticated infrastructure setup where domains auth.checkgos.org, start.checkgos.org, go.checkgos.org, start.borrowly.org, and predatorswatch.com all share the same hosting infrastructure with 50% confidence connections. These domains connect to an older domain, start.checkgo.or...

This scam campaign centers around a fraudulent lending operation using the "CheckGo" brand, orchestrated through a network of five interconnected domains that share the same underlying infrastructure. The primary domains include go.checkgos.org, start.checkgos.org, and auth.checkgos.org, all registered through NAMECHEAP INC on June 26, 2025. Two additional domains, start.borrowly.org (registered July 1, 2025) and predatorswatch.com (registered July 4, 2025), are part of the same network, with al...