web3-cha[.]lat

The domain web3-cha.lat was registered on April 04, 2026 through NameSilo, LLC and is currently resolved to the Cloudflare‑managed IP address 188.114.97.3, which GeoIP services map to Canada. The domain uses a Let’s Encrypt certificate (E7) and is delegated to the Cloudflare name servers lorna.ns.cloudflare.com and houston.ns.cloudflare.com. A HTTP request returns a 200 status code while the page title reports "404 Not Found," suggesting the site may be serving a generic error page to hide malicious content. Threat intelligence sources classify the activity as a high‑risk, generic phishing campaign specifically targeting investment scams. VirusTotal analysis shows three of ninety‑four security vendors flag the domain, and Gridinsoft assigns a trust score of 0 out of 100. AlienVault OTX lists the domain in eight separate pulses, and it appears on three public blocklists. Defensive products such as PhishDestroy, MetaMask, and SEAL have already blocked the domain. While the exact payload or lure has not been publicly observed, the convergence of multiple detections, low trust rating, and its classification as an investment‑focused phishing operation indicate a credible threat. Organizations should block the domain at the DNS or proxy level, monitor outbound connections to the associated IP, and treat any communications referencing web3-cha.lat as malicious. Continuous re‑evaluation is advised, as the infrastructure remains active and may evolve.