chanqenow[.]at

PhishDestroy has identified chanqenow.at as a generic phishing domain that poses a threat by attempting to deceive visitors into revealing sensitive information, such as login credentials or financial details. The domain was designed to mimic legitimate login interfaces, luring users into a false sense of security. Its recent creation and rapid appearance on security blocklists suggest it was part of a targeted campaign aiming to harvest user data for malicious purposes.

The evidence against chanqenow.at is compelling. VirusTotal reports that 2 out of 95 security vendors flag this domain as malicious, indicating a consensus among cybersecurity tools. The domain was registered through Virtualine on March 4, 2026, and is currently offline, but its short-lived activity was enough to appear on 3 security blocklists. It resolves to IP address 130.12.180.128 and uses a Let's Encrypt SSL certificate (E7), which may have given it an appearance of legitimacy. The page title simply repeats the domain name, suggesting a generic phishing template.

If a user has visited chanqenow.at, they should immediately change any passwords entered on the site and monitor their accounts for suspicious activity. It is recommended to run a full security scan on their device and enable two-factor authentication wherever possible. Users should also report the domain to their email provider or security team to prevent further exposure. Staying vigilant against unsolicited links and verifying website authenticity before entering credentials remains the best defense against such threats.