wallet-onchain-crypto[.]com

This domain, wallet-onchain-crypto.com, operates as a brand impersonation portal designed to deceive users of the cryptocurrency exchange Crypto.com. Analysis of the site's infrastructure and content reveals a fraudulent login interface mimicking the legitimate platform, with the explicit intent to harvest credentials or facilitate unauthorized transactions. The page title, 'Crypto.com International: Buy, Sell,' directly replicates the branding of the authentic service, increasing the likelihood of successful deception among unsuspecting users seeking to access their accounts or conduct transactions. Technical indicators confirm the malicious nature of this domain. VirusTotal detections report 10 out of 95 security vendors flagging the domain as malicious, while infrastructure analysis reveals it resolves to the IP address 188.114.96.3. The domain was registered on February 21, 2026, through Cloudflare, Inc., a registrar frequently exploited for rapid domain deployment in phishing campaigns. Additionally, the domain appears on one security blocklist, further corroborating its association with fraudulent activity. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as threat actors commonly leverage valid certificates to lend an appearance of legitimacy to malicious sites. Users who have visited wallet-onchain-crypto.com or interacted with its content should immediately revoke any sessions initiated through the domain and reset credentials associated with their Crypto.com accounts. It is recommended to monitor financial transactions for unauthorized activity and enable multi-factor authentication on all cryptocurrency-related accounts. If sensitive information was submitted, affected individuals should consider reporting the incident to relevant financial authorities and cybersecurity response teams for further mitigation. Proactive measures, such as blocking the domain and its associated IP address, are advised to prevent future exposure.