onchain-sew[.]com

This domain, onchain-sew.com, is flagged as a high-risk brand impersonation site targeting Phantom. Registered on April 17, 2026, through Gname.com Pte. Ltd., it remains active and resolves to IP address 172.67.162.164, hosted on Cloudflare infrastructure in Canada. The page title is set to 'Phantom,' consistent with impersonation of that brand. SSL certification is provided by Google Trust Services via WE1, and nameservers are braelyn.ns.cloudflare.com and jermaine.ns.cloudflare.com. Threat intelligence from AlienVault OTX shows the domain appears in one known pulse, and it is listed on three security blocklists, including PhishDestroy, MetaMask, and SEAL. VirusTotal scanning reports 6 out of 94 security vendors flagging the domain as malicious. The Gridinsoft trust score is 0 out of 100, indicating no confidence in its legitimacy. While the specific page content has not been visually analyzed, the combination of a recently registered domain, brand impersonation indicators, low trust score, and multiple blocklist entries strongly suggests this is an active phishing site. Defenders should block access to this domain and warn users of potential credential theft or other fraud targeting Phantom users.