onchaineth[.]site

The domain onchaineth.site was created on 23 December 2025 through the registrar Spaceship, Inc. It resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative name servers are brady.ns.cloudflare.com and elisa.ns.cloudflare.com, both belonging to Cloudflare’s DNS infrastructure. No TLS certificate is presented, indicating that the site is reachable only over HTTP. The HTTP response contains the page title "ETH Farming," which aligns with the reported scam type of wallet/seed phishing targeting Binance users.

Gridinsoft assigns a trust score of 0 out of 100, confirming the malicious assessment. VirusTotal analysis shows that 15 of 93 scanning vendors flagged the domain, providing independent corroboration of its threat profile. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy. Current operational status is offline, suggesting that the hosting has been taken down or the site is otherwise inaccessible.

Defenders should continue to block the domain at perimeter and DNS layers, monitor the associated IP range for any resurgence, and add the domain to internal threat intel feeds. Because the site is offline, further behavioural analysis of the page content is not possible; however, the combination of a brand‑impersonation target (Binance), a wallet‑seed phishing motive, and multiple vendor detections indicates a high likelihood of credential harvesting. Continued vigilance is advised, especially for users receiving unsolicited messages that reference Ethereum farming or Binance‑related rewards.