onchain6[.]pw

The domain onchain6.pw is a generic phishing site designed to deceive users into disclosing sensitive information or interacting with fraudulent content. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, onchain6.pw has been taken offline, but it previously posed an elevated risk of phishing-related threats.

Technical indicators confirm that onchain6.pw was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appeared on 1 security blocklist, specifically PhishDestroy. The domain was registered through Gname.com Pte. Ltd. on February 09, 2025, and resolved to the IP address 172.67.158.145, hosted by Cloudflare in the US. No SSL certificate was issued, and the observed page title was 'Onchain-ETH 2.0'. The domain was also found in 1 AlienVault OTX threat intelligence pulse, with nameservers adam.ns.cloudflare.com and chan.ns.cloudflare.com. Google Safe Browsing did not flag the domain at the time of assessment.

Users who may have interacted with onchain6.pw should take immediate steps to secure their accounts. If login credentials were entered, change passwords for all affected accounts and enable two-factor authentication (2FA) where possible. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. Victims of phishing scams should also consider filing a report with their national cybercrime unit.