online-chikuhob[.]com

The domain online-chikuhob.com was registered on March 13, 2026 through NiceNIC International Group Co., Limited and delegated to the Cloudflare nameservers archer.ns.cloudflare.com and delilah.ns.cloudflare.com. DNS resolution points to the IP address 172.67.208.184, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presents the page title "Attention Required! | Cloudflare," indicating that the underlying host is protected by Cloudflare services, including Browser Insights and HTTP/3.

An SSL certificate issued by Let’s Encrypt (E8) is present, confirming the use of standard TLS encryption. The domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal analysis shows that three of ninety‑four security vendors have flagged the domain, providing additional corroboration of malicious activity. The overall risk level is recorded as elevated, and the current operational status is offline, suggesting that the phishing infrastructure may have been taken down or is temporarily dormant.

While the available data confirms the domain’s involvement in a generic phishing campaign, no further behavioral details, such as the specific credential‑collection page or targeted brand, have been disclosed. Defenders should continue to monitor the domain’s host IP and associated Cloudflare accounts for re‑activation, ensure that outbound traffic to 172.67.208.184 is blocked at perimeter controls, and update internal blocklists with the observed indicator set. Additional investigation into the three VirusTotal flags may reveal payload characteristics or related infrastructure, aiding broader threat‑intel correlation.