Is chaseabag.club safe?

No. MalwareAnalyzer scanned chaseabag.club on 23 Aug 2026 and returned a malicious verdict with a score of 95 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was chaseabag.club checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

chaseabag.club - malicious URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned chaseabag.club and returned a malicious verdict (score 95), categorised as phishing. The page resolved to 104.219.250.37 on NAMECHEAP-NET - Namecheap, Inc., US in US. The domain was registered 390 days ago through NameCheap, Inc.. 7 domains and 3 IPs were contacted, over 12 HTTP requests. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 95) · Confidence 100%
Scanned URL: https://chaseabag.club/
Domain: chaseabag.club · IP: 104.219.250.37 · AS22612 · US
Server: nginx/1.28.3 (Ubuntu)
HTTP status: 200 · text/html
Registrar: NameCheap, Inc. · domain age 390 days · created 2025-07-28
Registrant country: US
TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Nov 21 02: · subject CN=chaseabag.club
HTTP requests captured: 12 · outgoing links: 12
Scan tier: standard · observed 2026-08-23 04:11:54 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Runtime data beacon to aftermarketapi.namecheap.com
Domain impersonates chase (combosquat)
Runtime data beacon to lander.parity.domains
Certificate issued < 48h ago

Detected technologies

Nginx

Contacted infrastructure

104.219.250.37 - AS22612 NAMECHEAP-NET - Namecheap, Inc., US (US)

Observed indicators

chaseabag.club
lander.parity.domains
www.namecheap.com
ap.www.namecheap.com
apps.apple.com
play.google.com
aftermarketapi.namecheap.com
104.219.250.37
34.123.115.113
3.131.245.34
https://chaseabag.club/
https://chaseabag.club/assets/index-BuG04mTK.js
https://chaseabag.club/assets/index-B_f2Ggms.css
https://lander.parity.domains/js/pa-6FZUe2Iv3m6Yx_KBS2sv2.js
https://www.namecheap.com/?utm_source=parkingpage&utm_medium=referral&utm_campaign=nc_market
https://chaseabag.club/logo.svg
https://www.namecheap.com/myaccount/login/?utm_source=parkingpage&utm_medium=referral&utm_campaign=nc_market
https://www.namecheap.com/support/knowledgebase/article.aspx/239/2201/how-can-i-renew-my-domain/?utm_source=parkingpage&utm_medium=referral&utm_campaign=nc_market
https://www.namecheap.com/support/knowledgebase/article.aspx/242/2207/what-is-the-domain-redemption-grace-period/?utm_source=parkingpage&utm_medium=referral&utm_campaign=nc_market
https://ap.www.namecheap.com/?utm_source=parkingpage&utm_medium=referral&utm_campaign=nc_market

Questions about chaseabag.club

Is chaseabag.club safe?: No. MalwareAnalyzer scanned chaseabag.club on 23 Aug 2026 and returned a malicious verdict with a score of 95 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was chaseabag.club checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of chaseabag.club

Scanned on MalwareAnalyzer by Cyble · Open interactive scan