onchainqdq[.]com

This domain is flagged for brand impersonation, specifically targeting the brand Phantom. The domain resolves to an IP address (104.21.7.14) located in California, USA, and is hosted by Cloudflare, Inc. It was registered through Gname.com Pte. Ltd. on April 17, 2026. The domain appears on three security blocklists and has a Gridinsoft trust score of 0 out of 100, indicating a significant security risk. The SSL certificate is issued by Google Trust Services / WE1. Nameservers are max.ns.cloudflare.com and zariyah.ns.cloudflare.com. The domain is currently active and accessible, returning an HTTP status 200. Defenders should consider blocking this domain to prevent users from accessing it. Given the high risk level and the presence of the domain on multiple blocklists, it is advisable to monitor for any associated malicious activities and to educate users about the dangers of brand impersonation scams. The exact content of the site has not been analyzed, but the page title matches the brand Phantom, which aligns with the reported scam type. Defenders should also review any internal logs for visits to this domain and implement additional security measures as necessary.