chainord[.]adsquiz[.]io

This domain, chainord.adsquiz.io, is flagged as a generic phishing threat specializing in cryptocurrency wallet compromise. Analysis indicates no direct association with known brand impersonation or drainer kits such as Angel Drainer or Inferno Drainer, though its infrastructure aligns with common phishing patterns targeting decentralized finance (DeFi) users. The domain lacks explicit branding but employs deceptive subdomain naming conventions (e.g., 'chainord') to mimic legitimate blockchain services, likely aiming to harvest seed phrases or private keys through fake wallet interfaces or transaction prompts. Infrastructure analysis reveals the following technical indicators: VirusTotal detection score of 0/95, indicating no current antivirus engine flags. The domain was registered through Hosting Ukraine LLC on May 30, 2022, and currently resolves to IP address 104.21.22.138, a Cloudflare proxy endpoint. The SSL certificate is issued by Google Trust Services, providing HTTPS encryption to evade basic security warnings. As of the latest scan, Google Safe Browsing (GSB) does not list the domain, and no blocklist entries were identified across major threat intelligence platforms, including PhishTank, OpenPhish, or URLVoid. The domain remains active and unmitigated, posing a persistent risk to users interacting with cryptocurrency-related content. Response actions should include immediate submission to threat intelligence feeds for broader detection, particularly given its zero-detection status on VirusTotal. Network-level blocking of 104.21.22.138 is recommended for organizations handling sensitive wallet operations. Users are advised to verify domain authenticity via official project documentation and avoid entering wallet credentials on any site resembling chainord.adsquiz.io. Continuous monitoring is required due to the domain's longevity and lack of prior detection.