chanflip[.]xyz

The domain chanflip.xyz was registered on February 21, 2026 and is presently taken offline. DNS resolution points to the IPv4 address 163.61.188.222, which is announced by AS153568 (NEW DHAKA HARDWARE) and geolocated to the United States. The site presented the page title “Chainflip Swap” and is classified as a crypto‑scam that impersonates the Arbitrum brand. SSL analysis identified the certificate as type R12, indicating the presence of a valid TLS layer at the time of observation.

VirusTotal analysis recorded six positive detections out of ninety‑three security vendors, suggesting that multiple anti‑malware engines recognised malicious characteristics associated with the domain. The domain appears in a single threat‑intelligence pulse on AlienVault OTX and is listed on one public blocklist; it is also explicitly blocked by the PhishDestroy service. No additional intelligence sources, such as Safe Browsing or extended reputation scores, are available in the current dataset.

The combination of a brand‑targeted page title, a modest VirusTotal detection rate, and inclusion in both OTX and a blocklist indicates an elevated risk profile despite the offline status. Defenders should continue to block the domain and its resolved IP address at network perimeters, incorporate the observed indicators (domain name, IP, ASN, SSL fingerprint) into detection signatures, and monitor for any re‑use of the infrastructure. Ongoing surveillance of new registrations bearing similar naming patterns or hosting under the same ASN is recommended to pre‑empt potential re‑activation.