champrally[.]com[.]avkresearch[.]com

The domain champrally.com.avkresearch.com has been identified as a high‑risk generic phishing vector. It was created on February 21, 2026 and remains active as of the report date, July 12, 2026. The site returns HTTP status code 200 and presents the page title "Home - ChampRally," indicating a functional front‑end that may be leveraged for credential harvesting. Current threat intelligence assigns a high risk rating based on multiple detection sources.

Infrastructure analysis reveals that the domain is registered through Entrust Domains, LLC and resolves to the IPv4 address 198.12.66.123, which belongs to AS36352 operated by HostPapa in the United States. The authoritative name servers are ns1.afternic.com, ns2.afternic.com, and a verification‑prefixed server, suggesting reliance on third‑party DNS services. Notably, the site lacks an SSL/TLS certificate, exposing all traffic to potential interception. A Gridinsoft trust score of 0 out of 100 further underscores the malicious nature of the host.

Detection metrics show that the domain appears on a single security blocklist and is explicitly blocked by PhishDestroy. VirusTotal analysis reports that three of ninety‑five scanned security vendors flag the domain as malicious, providing additional corroboration of its phishing intent. The combination of a valid HTTP response, a recognizable page title, and inclusion on a reputable blocklist indicates that the domain is actively being used to lure victims.

Defenders should prioritize immediate containment of this indicator. Network and endpoint controls ought to block DNS resolution and HTTP traffic to 198.12.66.123, and security appliances should be updated to include the domain in their phishing blocklists. Continuous monitoring for any changes in the domain's resolution or additional vendor detections is advised, as threat actors may attempt to pivot to alternative infrastructure.