# PhishDestroy domain threat record: lachronicle.news Content language: English Canonical HTML report: https://phishdestroy.io/domain/lachronicle.news/ Machine-readable companion: https://phishdestroy.io/domain/lachronicle.news/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-27 08:11:32 UTC - Last availability or vendor check: 2026-10-27 23:00:29 UTC - Stored record updated: 2026-10-27 23:23:13 UTC - VirusTotal detections in the stored snapshot: 11/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.96.1 - Registrar in stored WHOIS data: NameCheap, Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2025-01-29 08:51:09 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a10fe1-cc8b-7799-a000-eda800d60df8/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/lachronicle.news - Certificate Transparency search: https://crt.sh/?q=%25.lachronicle.news - Web Archive lookup: https://web.archive.org/web/*/https://lachronicle.news/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed lachronicle.news as a suspicious domain based on multiple VirusTotal detections of malicious activity. The recorded page title was “LA Chronicle – Best News Source in Los Angeles”, which alone does not prove malicious intent. The domain was first observed by PhishDestroy on 2026-10-27. How the scam works Domains flagged as suspicious are often employed to host phishing pages, deliver malware, or impersonate trusted brands. The current evidence does not reveal a specific payload, credential‑harvesting form, or financial‑fraud mechanism on this site. Evidence VirusTotal recorded 11 detections from 92 scanning engines on 2026-10-27, labeling the domain malicious in ten engines and suspicious in one, with vendors such as BitDefender, Kaspersky and Fortinet marking it as phishing or malware. Google Safe Browsing checked the domain on 2026-10-27 and reported no threat. URLScan captured the site on 2026-10-06; its automated engine flagged it as malicious with a high score, but the overall verdict was clean. PhishDestroy’s internal blocklist includes the domain, while external blocklists showed no entries, and OTX listed three pulses referencing it. Infrastructure The domain was registered on 2025-01-29 through NameCheap, Inc., giving it an age of about 614 days as of the last check. DNS records at the time of analysis listed Cloudflare‑managed addresses in the 188.114.96.0/24 and 188.114.97.0/24 ranges, and the TLS certificate from Google Trust Services was valid until 2026-12-12. The site served an HTTP 200 response and redirected HTTP to HTTPS on 2026-10-27. What to do Visitors should avoid entering any personal or login information on the site and, if they have already done so, change affected passwords immediately. Organizations can block the domain at network perimeters and monitor logs for any connections. Continue to follow reputable threat‑intel feeds for updates on this domain’s status. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a10fe1-cc8b-7799-a000-eda800d60df8/ Cloudflare Radar report: https://radar.cloudflare.com/scan/12b3196b-1e3f-4445-a02d-695450f6875d Stored capture screenshot: https://urlscan.io/screenshots/01a10fe1-cc8b-7799-a000-eda800d60df8.png Cloudflare Radar screenshot (2026-10-27T08:13:01Z): https://screenshots.phishdestroy.io/cf/12b3196b-1e3f-4445-a02d-695450f6875d.png URLScan screenshot (2026-10-27T08:13:10Z): https://screenshots.phishdestroy.io/us/01a17c6b-8253-7505-84e2-614c0f47f0f0.png URLScan capture report: https://urlscan.io/result/01a17c6b-8253-7505-84e2-614c0f47f0f0/ VirusTotal report: https://www.virustotal.com/gui/domain/lachronicle.news Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=lachronicle.news Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-27 08:14:55 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a10fe1-cc8b-7799-a000-eda800d60df8.png Captured: 2026-10-27 08:11:32 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a10fe1-cc8b-7799-a000-eda800d60df8.png Source report: https://urlscan.io/result/01a10fe1-cc8b-7799-a000-eda800d60df8/ - URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17c6b-8253-7505-84e2-614c0f47f0f0.png Captured: 2026-10-27 08:13:10 UTC Source report: https://urlscan.io/result/01a17c6b-8253-7505-84e2-614c0f47f0f0/ SHA-256: 636bad8f2c2a780050da0fead5d4300d74a29cf557ca91ba3632a2a996d8ce48 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/12b3196b-1e3f-4445-a02d-695450f6875d.png Captured: 2026-10-27 08:13:01 UTC Source report: https://radar.cloudflare.com/scan/12b3196b-1e3f-4445-a02d-695450f6875d SHA-256: 387c0f8c11fdc79a2714804abc4052368448d61eb2eb4bdd1ccd50bf5713ba7c ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-27T08:13:39Z", "uuid": "01a10fe1-cc8b-7799-a000-eda800d60df8", "scanned_at": "2026-10-06T06:23:46Z", "final_url": "https://lachronicle.news/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://lachronicle.news/", "from": "http://lachronicle.news/", "status": 307 } ], "ip": "2a06:98c1:3121::3", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "188.114.97.3", "142.251.14.94", "2a00:1450:4001:c21::5f", "2a06:98c1:3121::3" ], "asns": [ "13335", "15169" ], "countries": [ "US", "DE" ], "doc_hash": "672bf23fb8474a33cd7a58e7d94ac0e4c2328f4401e43c2811da758beb40ef7a", "script_hashes": [ "18d4f228c8e273c7120c610daf47ce453dd0a1b2e4ee736b415bbd25e8c7ecaa", "44cc8261c67c24e5869e7be1571ac91173c7634fd82ed228ebf775acbeeea89e", "f10a4bb344a7c2f57375d24cfb312cafd156a196888ed110069a50be6e38e5be", "79771d6924ff321e5108955ac81a5e8cf2679072db61765aa1e10002f8ec4014" ], "globals": [ "Pretext" ], "tls": { "san": [ "lachronicle.news", "*.lachronicle.news" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "lachronicle.news", "protocol": "TLS 1.3", "valid_to": "2026-12-12T07:12:15Z", "valid_from": "2026-09-13T06:12:19Z" }, "domain_age_days": 614, "apex_age_days": 614, "tls_age_days": 23, "tls_valid_days": 90, "requests": 36, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "content-security-policy": "default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://platform.twitter.com https://*.twimg.com https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.c", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "geolocation=(), microphone=(), camera=()" } }, "cf": { "v": 1, "fetched_at": "2026-10-27T08:13:42Z", "uuid": "12b3196b-1e3f-4445-a02d-695450f6875d", "scanned_at": "2026-10-27T08:13:01Z", "final_url": "https://lachronicle.news/", "status": 200, "history": [ { "url": "https://lachronicle.news/", "status": 200 } ], "dom_hash": "96fc34b93878772a83919d9458a53d0167c1b8bfef730fab68d13524d9d7cf9d", "doc_hash": "530b1a2446fa454ea11a9b2a0089f5371b11d85e0a74ca7e174d502bcb804949", "domain_risks": [ "Scam", "Security threats", "CIPA Filter", "CIPA", "Unreliable Information", "Questionable Content" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "lachronicle.news", "type": "A", "value": "188.114.97.0" }, { "name": "lachronicle.news", "type": "A", "value": "188.114.96.0" }, { "name": "lachronicle.news", "type": "AAAA", "value": "2a06:98c1:3121::" }, { "name": "lachronicle.news", "type": "AAAA", "value": "2a06:98c1:3120::" } ], "dnssec_valid": false, "ip": "188.114.97.0" }, "vt": { "v": 1, "fetched_at": "2026-10-27T08:12:28Z", "analysis_at": "2026-10-24T14:46:01Z", "stats": { "timeout": 0, "harmless": 47, "malicious": 10, "suspicious": 1, "undetected": 34 }, "detections": { "G-Data": "phishing", "Lionic": "malicious", "Sophos": "phishing", "Webroot": "malicious", "Fortinet": "malware", "Kaspersky": "phishing", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "malicious", "Forcepoint ThreatSeeker": "malicious" }, "reputation": 0, "created": "2025-01-29T00:00:00Z", "updated": "2026-01-15T00:00:00Z", "first_seen": "2025-01-29T14:56:41Z", "dns": [ { "ttl": 300, "type": "A", "value": "104.21.82.213" }, { "ttl": 21600, "type": "NS", "value": "gordon.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "gordon.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.164.1" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3036::ac43:a401" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:52d5" }, { "ttl": 21600, "type": "NS", "value": "macy.ns.cloudflare.com" } ], "dns_at": "2026-10-24T14:48:26Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "lachronicle.news", "*.lachronicle.news" ], "issuer": "Google Trust Services / WE1", "serial": "c1a15816db45e6cd13d24a77866ceadb", "sha256": "bdd04fcd79db098950f13dd2d82aafdf2945088807671a007ef4e169b7ed8527", "subject": "lachronicle.news", "valid_to": "2026-12-12T07:12:15Z", "valid_from": "2026-09-13T06:12:19Z" }, "whois": [], "rdap": { "status": [ "client transfer prohibited" ], "events": { "last changed": "2026-01-15T10:29:03Z", "registration": "2025-01-29T09:51:09Z", "registrar expiration": "2027-01-29T09:51:09Z", "last update of RDAP database": "2026-10-19T23:00:57Z" }, "registrar": "NAMECHEAP INC", "registrar_iana_id": "1068" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-27T08:14:20Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "lachronicle.news" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "trackers": { "requests": 28, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 } ] }, "dns_server": { "ns": [ { "ip": "162.159.38.78", "host": "macy.ns.cloudflare.com" }, { "ip": "172.64.33.170", "host": "gordon.ns.cloudflare.com" } ], "zone": "lachronicle.news" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "NS": [ "gordon.ns.cloudflare.com", "macy.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"gordon.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416841712, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3120::3", "2a06:98c1:3121::3" ] }, "get_ip": { "ip": "2a06:98c1:3120::3", "family": 6 }, "tech_stack": { "technologies": [ "Priority Hints", "Lightbox", "Google Font API", "Cloudflare", "HTTP/3" ] }, "linked_pages": { "internal_count": 35 } } } ```