chainmorkie[.]xyz

PhishDestroy has identified chainmorkie.xyz as a credential theft phishing domain, currently offline. The site, titled "Nur einen Moment…," was designed to harvest login credentials from unsuspecting visitors. No brand impersonation was detected, but the generic phishing template suggests a broad targeting approach.

Analysis reveals that chainmorkie.xyz was flagged by 3 of 95 VirusTotal security vendors, indicating moderate detection among security tools. The domain was registered on July 23, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, and resolves to IP address 104.21.32.1. It appears on one security blocklist, and its trust scores remain low due to the lack of an SSL certificate and recent creation date.

Given that chainmorkie.xyz has been taken offline, the immediate threat is neutralized. However, users who may have encountered the site should change their passwords and monitor for suspicious account activity. PhishDestroy recommends blocking this domain at the network level and educating users to recognize generic credential theft pages in the future.