chainbase[.]checkerdrop[.]website

The domain chainbase.checkerdrop.website was created on February 21, 2026 and is presently taken offline. Technical examination shows it resolves to IP address 66.29.153.138, which belongs to a US‑based hosting provider (AS22612, Namecheap, Inc.). Registration was performed through NameCheap, Inc., and the site presented a Sectigo Public Server Authentication CA DV R36 TLS certificate, indicating a valid SSL chain despite the malicious purpose. The page title returned by the HTTP response was "Chainbase.com: The #1 Web3 Data Infra," a phrasing that leverages the reputation of the Chainbase brand to lure victims.

The threat profile classifies the activity as Wallet/Seed Phishing and lists the target brand as "across," confirming that the operator is attempting to impersonate that entity. Reputation services have assigned a Gridinsoft trust score of 0 out of 100, and the domain appears on two independent blocklists—PhishDestroy and ScamSniffer. VirusTotal analysis recorded detections from two of ninety‑three scanning engines, reinforcing the malicious nature of the infrastructure.

Although the site is no longer reachable, defenders should continue to block the associated IP address, monitor for any resurgence of the domain, and add the domain to internal deny lists. Network sensors should be tuned to flag TLS connections to the Sectigo certificate fingerprint observed here, and any credential or seed phrase submission attempts to URLs matching the domain pattern should be treated as compromised. Continuous observation of NameCheap‑registered assets linked to AS22612 is recommended to pre‑empt potential re‑use of this hosting environment for future impersonation campaigns.