newchapterfinance[.]com[.]au

This domain, newchapterfinance.com.au, is flagged as an active credential phishing threat based on multiple technical indicators. Analysis indicates a trust score of 0 out of 100 from Gridinsoft, with detection by one security blocklist and a single vendor flag on VirusTotal. The domain resolves to IP address 188.114.96.3, hosted on Cloudflare infrastructure (AS13335), which is frequently leveraged to obscure attacker origins and evade takedown efforts. The observed HTTP 301 redirect suggests the domain may be part of a larger redirection chain, though the final destination remains unconfirmed due to the lack of detailed page content analysis. Infrastructure review reveals Cloudflare nameservers (ariadne.ns.cloudflare.com and ignacio.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services, which aligns with common phishing tactics to appear legitimate. The page title, .sitebeat.site, does not correspond to known financial services branding, and no specific brand impersonation is confirmed in the available data. MX records point to mx1.titan.email and mx2.titan.email, which may be used for follow-up phishing emails or credential harvesting campaigns, though their exact role in this operation is not yet verified. Defenders should treat this domain as high-risk due to its active status, confirmed blocklisting, and association with Cloudflare-hosted phishing infrastructure. The combination of a 301 redirect, low trust scores, and minimal vendor detections suggests this may be a newer or less widely distributed campaign. Organizations are advised to block the domain and its resolving IP at the network level, monitor for related email activity tied to the observed MX records, and review logs for connections to 188.114.96.3. Further investigation into the redirect chain and any associated email templates is recommended to determine the full scope of the threat.