# chainlist.xyz — MALICIOUS

> Warning: chainlist.xyz is a high-risk phishing site. Avoid interaction and block access immediately to protect your data.

## Summary
PhishDestroy has identified chainlist.xyz as an active phishing domain posing significant threats to user security. The domain is linked to generic phishing attacks, potentially aiming to steal sensitive user credentials or personal information. Despite displaying a '403 Forbidden' page, the site remains flagged for malicious intent, indicating ongoing risk to unsuspecting visitors.

The domain chainlist.xyz was registered on August 12, 2021, through REG.RU LLC. It resolves to the IP address 194.58.112.165 and currently appears on multiple security blocklists. VirusTotal analysis shows that a noteworthy number of security vendors have flagged this domain. The persistent presence of the domain on six different blocklists underscores its continuing use for phishing campaigns.

Users are strongly advised to avoid accessing chainlist.xyz and to implement blocking measures in their security solutions. Organizations should update their threat intelligence feeds and educate employees about this domain to prevent phishing-related breaches. Staying vigilant and using reliable security tools can help mitigate risks posed by this active phishing infrastructure.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: 403 Forbidden

## Domain Intelligence
- Registered: 2021-08-12 23:02:34
- Expires: 2026-08-12 23:59:59
- Registrar: Registrar of Domain Names REG.RU LLC
- Country: Russia
- IP: 194.58.112.165
- Nameservers: ns1.shop.reg.ru ns2.shop.reg.ru

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "AlphaSOC", "BitDefender", "CRDF", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Lionic", "Seclookup", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 6 hits
  Lists: ["PhishDestroy", "MetaMask", "Polkadot", "SEAL", "Enkrypt", "Codeesura"]

## Live Page Content
- Meta description: chainlist.xyz is for sale on Spaceship. Secure checkout and quick transfer. See all purchase options. No hidden fees.
- Meta title: Buy chainlist.xyz | Spaceship

### Page Text
chainlist.xyz for sale | Spaceship.com Domain for sale chainlist.xyz Free transaction support Secure payments Spaceship reliability Listed with spaceship.com get this domain Buy now $3,888 Make offer $ Your offer must be higher than the seller’s minimum price. Payment methods Next Please select one of the options above You will be redirected to spaceship.com Listed with spaceship.com Buyer protection program Fast and easy transfer Flexible payment methods The entirety of this site is protected by copyright © 2001– 2026 spaceship.com — 4600 East Washington Street, Suite 305, Phoenix, AZ 85034, USA Your personal information Close Fill-in your basic information to submit the offer for chainlist.xyz First name * Required field Last name * Required field Email * Email address is not valid Phone Number * 000 Select country Close After entering your personal info you will be redirected to spaceship.com where you can negotiate the purchase of this domain. Submit offer We are almost there Close The domain you are trying to purchase is listed on spaceship.com . You will now be redirected to Spaceship, where you can pay and finalize your purchase. Continue

### External Scripts
- https://forsale.spaceship-cdn.com/static/version/0.32.0/main.js

### Form Fields
- tel
- Enter your last name
- firstName
- email
- lastName
- button
- Enter your first name
- 000 000 000 000
- Enter your email address
- Search here
- text

### External Links
- https://www.spaceship.com
- https://www.spaceship.com/marketplace/add-to-cart/marketplacedomainid/80744d99-96bd-49eb-a480-04b45e4d9535
- https://www.spaceship.com/

## Evidence
- Screenshot: https://urlscan.io/screenshots/0198a2f1-d1a6-74bd-a15e-13ae1e664e17.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/fe5642fb-82bc-4acd-a648-7d7f26ef0324
- PhishDestroy: https://phishdestroy.io/domain/chainlist.xyz/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/chainlist.xyz/
Last updated: 2026-03-13