chaintax[.]org

Analysis of chaintax.org as of July 25, 2026 indicates that the domain was registered on July 03, 2026 through Namecheap Inc. The authoritative name servers are dns1.namecheaphosting.com and dns2.namecheaphosting.com, and the domain resolves to the IPv4 address 198.187.31.49. The site presents the page title “ChainTax: Automatic Tax on Your Crypto Withdrawals,” suggesting it is positioned as a service that claims to levy taxes on cryptocurrency withdrawals. No additional metadata such as SSL certificate details, HTTP response codes, or content snapshots are currently available for public analysis.

The domain appears on a single security blocklist and has been flagged by the PhishDestroy blocklist, indicating that at least one security vendor has classified it as malicious. VirusTotal records show that the domain was scanned by 91 vendors, with none reporting a detection at the time of the scan; this absence of detections does not constitute a validation of safety. No listings were observed on Google Safe Browsing, Open Threat Exchange, or other reputation feeds in the available data set.

Given the recent registration date, the use of a generic hosting provider, and the presence on a blocklist, the infrastructure is consistent with a newly deployed phishing or scam operation. Defenders should consider adding chaintax.org to network‑level deny lists, monitoring DNS queries for the associated IP address, and reviewing any outbound traffic that may contact the domain. Further investigation, including retrieval of the HTTP payload and verification of TLS certificates, is recommended to confirm the malicious intent and to support any incident response actions.