chainverify[.]info

The domain chainverify.info is a confirmed phishing site engaged in brand impersonation targeting Coinbase, a cryptocurrency exchange. It operated as a cryptocurrency scam under the guise of a 'Web3 Portal', designed to deceive users into disclosing sensitive information or transferring digital assets. As of the latest verification, chainverify.info has been taken offline, though it previously posed an elevated risk due to its fraudulent activity.

Technical analysis of chainverify.info reveals limited detection by security vendors, with only 1 of 95 VirusTotal vendors flagging the domain. The domain was registered through AE-IQWEB-LLC-20121121 (ASN: 59692) and resolved to the IP address 186.2.166.73, located in the United Arab Emirates under AS59692 IQWeb FZ-LLC. No SSL certificate was observed. The domain appeared on 4 security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, and received a Gridinsoft trust score of 0/100. Nameservers associated with the domain were pns41.cloudns.net, pns42.cloudns.net, pns43.cloudns.net, and pns44.cloudns.net.

Users who interacted with chainverify.info should assume their credentials or wallet details may have been compromised. For cryptocurrency-related exposure, revoke any token approvals granted to the site and transfer funds to a new wallet. If login credentials were entered, change passwords immediately, enable two-factor authentication, and monitor accounts for unauthorized activity. Report the phishing domain to Coinbase’s security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.