chip-usdai[.]org

PhishDestroy identifies chip-usdai.org as an active crypto drainer domain impersonating the USDai cryptocurrency platform. The domain is currently under investigation with a status marked as active. This threat involves unauthorized cryptocurrency transactions, specifically designed to drain user wallets by mimicking legitimate USDai services. The operation is ongoing, and users are strongly advised to exercise caution when interacting with this domain or any associated links.

This domain was flagged by 2 of 95 VirusTotal vendors as of the latest scan, indicating no immediate detections but not ruling out evasion tactics. The domain resolves to IP 104.21.23.248 and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com. The SSL certificate is provided by Let's Encrypt, and the domain was created on April 08, 2026. Despite the lack of current detections, the recent creation date and lack of historical trust scores warrant heightened scrutiny. There are no reported blocklist inclusions at this time, but the domain's behavior aligns with emerging crypto drainer campaigns designed to exploit user trust in legitimate services.

While this domain remains under investigation, PhishDestroy recommends immediate caution. Users should avoid accessing chip-usdai.org or any suspicious links associated with it. Verify the authenticity of websites by cross-referencing official domains and using browser security extensions. Report this domain to your cybersecurity team or through platforms like Google Safe Browsing, VirusTotal, or PhishDestroy’s reporting portal. If you have interacted with this domain, disconnect from the internet, scan your system for malware, and consider revoking any wallet permissions granted to suspicious domains. Stay vigilant and prioritize verified sources for cryptocurrency transactions to mitigate risks associated with emerging threats like crypto drainers.