# onchainbtcsaving.com — SUSPICIOUS

> PhishDestroy identifies onchainbtcsaving.com as a phishing site. This domain, created February 19, 2026, is likely a Bitcoin savings scam. Avoid!

## Summary
PhishDestroy has identified onchainbtcsaving.com as an active phishing domain. This site likely hosts a generic cryptocurrency savings scam, attempting to deceive users into depositing Bitcoin into fraudulent accounts. The campaign does not appear to leverage a known drainer kit at this time, indicating a simpler, direct transfer fraud scheme.  

Technical indicators for onchainbtcsaving.com include a VirusTotal score of 0/95, suggesting it is a newly launched or low-profile threat. The domain is registered through GMO Internet, Inc. and resolves to IP address 118.107.28.253. The domain was created on February 19, 2026, and utilizes an SSL certificate issued by Let's Encrypt. Currently, the domain is not listed on major blocklists.  

The domain is currently active and poses a risk to users seeking Bitcoin savings opportunities. Users should avoid interacting with onchainbtcsaving.com and refrain from providing any personal or financial information. Further investigation is recommended to determine the full scope of the phishing campaign and to identify potential victims. Immediate action includes adding the domain to blocklists and alerting relevant cybersecurity authorities.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-19 09:15:45
- Registrar: GMO Internet, Inc.
- IP: 118.107.28.253

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/onchainbtcsaving.com
- PhishDestroy: https://phishdestroy.io/domain/onchainbtcsaving.com/
- LLM endpoint: https://phishdestroy.io/domain/onchainbtcsaving.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/onchainbtcsaving.com/
Last updated: 2026-04-10