chc337[.]it

This domain, chc337.it, was registered through 1 Api GmbH and first observed on February 10, 2025. The site currently returns the page title “Welcome aboard” but is listed as taken offline at the time of this report (July 24, 2026). Technical analysis shows the domain resolves to the Cloudflare‑owned address 188.114.97.3, which belongs to AS13335 in the United States. The authoritative nameservers are celeste.ns.cloudflare.com and kyrie.ns.cloudflare.com, confirming the use of Cloudflare DNS. No TLS certificate is presented, indicating that the service is delivered over plain HTTP only.

Reputation services assign extremely low trust scores: Gridinsoft rates the domain 0 out of 100, and Scamadviser rates it 1 out of 100. The domain appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal scans report that 15 of 95 antivirus and URL‑reputation engines identify the domain as malicious, reinforcing the suspicion of phishing intent. AlienVault OTX lists the domain in one pulse, providing additional community‑based corroboration.

Given the combination of a generic phishing classification, absence of encryption, low reputation metrics, and multiple vendor detections, the infrastructure should be treated as high‑confidence malicious. Defenders are advised to add 188.114.97.3 to network‑level deny lists, enforce blocking of HTTP requests to chc337.it in proxy and firewall policies, and ensure endpoint protection solutions ingest the VirusTotal detection count. Continuous monitoring of the domain’s IP and any future DNS changes is recommended, as the underlying Cloudflare address could be repurposed. Incident response teams should also review recent logs for outbound connections to this host and consider quarantine of any internal accounts that may have interacted with the “Welcome aboard” page.