secure-chat.solutions

Analysis of secure-chat.solutions indicates an active credential‑phishing campaign. The domain is registered through GoDaddy.com, LLC and uses the default GoDaddy nameservers ns75.domaincontrol.com and ns76.domaincontrol.com. DNS resolution points to IP 3.33.251.168, which is identified as an AWS Global Accelerator endpoint located in Canada. The site presents a 301 redirect and serves a GoDaddy TLS Intermediate CA DV certificate (R1v1). The page title “Secure Chat – AI your team can use. Control your business can trust.” suggests an attempt to lure corporate users with artificial‑intelligence messaging services. Independent blocklists have already flagged the site; PhishDestroy, MetaMask, and SEAL list it as malicious, and it appears on three additional security blocklists. VirusTotal reports four of ninety‑one scanners flagging the domain, reinforcing the suspicion of malicious intent. While the exact phishing landing page has not been captured, the combination of credential‑phishing classification, the presence on multiple blocklists, and the infrastructure characteristics provide sufficient evidence for defensive action. Organizations should block the domain at network perimeters, update intrusion‑detection signatures, and monitor for authentication attempts directed to the URL. Continued observation is advised to detect any evolution of the payload or associated command‑and‑control infrastructure.