996eth[.]cc

996eth.cc was identified as a generic phishing domain impersonating the Onchain-ETH 2.0 platform, targeting users seeking cryptocurrency staking opportunities. The domain is currently offline, but its brief activity posed a significant risk to individuals drawn by the promise of Ethereum 2.0 rewards. PhishDestroy's analysis confirms that this site was designed to harvest credentials and potentially private keys from unsuspecting visitors.

Technical indicators reveal that 996eth.cc was flagged by 7 of 95 VirusTotal vendors, reflecting a moderate detection rate that underscores its malicious intent. The domain was registered through Gname.com Pte. Ltd. and created on October 28, 2025, with an IP address of 172.67.141.115. It appeared on two security blocklists, and its SSL certificate was issued by Google Trust Services (WE1), a common tactic used by phishing sites to appear legitimate. The domain's short lifespan and rapid takedown suggest active monitoring by security communities.

Given the elevated risk level and the domain's offline status, users who encountered 996eth.cc should assume their data may have been compromised. Immediate actions include changing passwords for any accounts linked to the same credentials, enabling two-factor authentication, and monitoring financial accounts for unusual activity. PhishDestroy recommends avoiding similar domains with vague branding like "Onchain-ETH 2.0" and verifying official URLs through trusted sources before engaging with cryptocurrency platforms. Stay vigilant against phishing attempts that exploit trending topics to lure victims.