# onchainpk.net — SUSPICIOUS

> onchainpk.net is a crypto drainer impersonating a crypto brand; VirusTotal shows 0/95 detections as of seed 70b040.

## Summary
PhishDestroy identifies onchainpk.net as an active crypto drainer campaign that drains victim wallets by tricking users into connecting their crypto wallets to a malicious smart contract interface hosted on this domain. Once connected, the contract silently transfers tokens and NFTs from the victim’s wallet to attacker-controlled addresses. Users who interact with this site risk irreversible financial losses including complete balance depletion.  

This domain was flagged on a public blocklist within days of its creation, yet it remains undetected by 95 security engines on VirusTotal as of December 2023. The domain was registered on November 03, 2025 through NameSilo, LLC, and its SSL certificate is issued by Google Trust Services, which attackers commonly abuse to appear legitimate. The site resolves to IP address 188.114.96.3 and is currently blocked by ScamSniffer, but it continues to operate and lure users through social media and phishing messages.  

If you visited onchainpk.net, immediately disconnect your wallet, revoke any connected permissions via your wallet app or a reputable revoke tool like revoke.cash, and transfer remaining funds to a clean wallet if possible. Do not enter any seed phrases, private keys, or sign transactions while connected to this site. Report the incident at PhishDestroy using the unique seed 70b040 so the domain can be blocked across more platforms. Always verify links in messages and posts using PhishDestroy’s verification service before clicking.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-11-03 03:10:53
- Registrar: NameSilo, LLC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/onchainpk.net
- PhishDestroy: https://phishdestroy.io/domain/onchainpk.net/
- LLM endpoint: https://phishdestroy.io/domain/onchainpk.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/onchainpk.net/
Last updated: 2026-04-08