onchain-crypto-zx[.]cc
“Crypto Onchain”
onchain-crypto-zx.cc — Konten tidak tersedia. Jenis penipuan: Crypto Drainer. Ringkasan bukti: VirusTotal 2/94 (alphaMountain.ai, Forcepoint ThreatSeeker); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 71/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
PhishDestroy identifies onchain-crypto-zx.cc as an active cryptocurrency drainer impersonating legitimate blockchain services. This domain leverages deceptive naming to trick users into connecting crypto wallets, enabling unauthorized fund transfers. The campaign poses a high risk to cryptocurrency holders due to its stealthy execution and minimal initial detection coverage. This domain was flagged with a threat type of generic_phishing and is classified as an active cryptocurrency drainer. The domain resolves to IP 104.21.56.138, registered through Gname.com Pte. Ltd., and utilizes a Let's Encrypt SSL certificate. Domain creation occurred on April 16, 2026, and it currently shows 2/95 detections on VirusTotal, with no blocklist entries as of the latest investigation. The domain's recent registration and lack of detection suggest it is part of an emerging threat campaign targeting crypto users. Mitigation steps for this cryptocurrency drainer threat include immediately blocking the domain and associated IP address (104.21.56.138) at the network and DNS levels. Users should avoid interacting with this domain or any linked websites, and verify the authenticity of crypto-related platforms through official channels. Cryptocurrency holders are advised to revoke any unauthorized wallet connections and monitor transactions closely. Organizations should update threat intelligence feeds and firewalls to include this domain, and consider deploying web filtering rules to prevent access. Additionally, reporting this domain to relevant authorities and threat intelligence platforms can aid in broader detection and takedown efforts.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 6 identified
Progressive JavaScript framework for building user interfaces.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of onchain-crypto-zx.cc · checked Apr 17, 2026
Bukti & Laporan Eksternal
PD-20260417-DC2D66 Recipient: complaint@gname.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive