onchain-vsip[.]com
“404 Not Found”
Ringkasan bukti
The domain onchain-vsip.com has been identified as a crypto drainer phishing site, designed to steal cryptocurrency wallet credentials and drain funds from connected accounts. Analysis indicates the infrastructure was actively targeting users through deceptive web interfaces mimicking legitimate blockchain services. As of the latest verification, the domain has been taken offline, though residual risks may persist for users who interacted with it prior to its removal. Infrastructure analysis reveals the domain was registered on October 19, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. It resolved to the IP address 188.114.96.3 and was protected by Cloudflare, utilizing technologies such as PHP, Vue.js, HSTS, and HTTP/3 to enhance its operational security and evade detection. The domain was flagged by 12 of 95 security vendors on VirusTotal, appeared on four security blocklists, and was explicitly blocked by multiple wallet security providers. Its SSL certificate was issued by Google Trust Services, adding a superficial layer of legitimacy. Gridinsoft assigned the domain a trust score of 0/100, further corroborating its malicious intent. The current status of onchain-vsip.com is offline, though the infrastructure may resurface under a different domain or IP configuration. Users who connected wallets or entered credentials on this site should assume compromise and take immediate action. Recommended steps include revoking all active wallet session approvals, transferring remaining assets to a new wallet address, and monitoring transaction histories for unauthorized activity. Organizations and individuals are advised to update blocklists with the domain and associated IP, and to conduct retrospective log analysis to identify potential prior interactions. Given the high-risk nature of crypto drainer threats, continuous vigilance and proactive security measures are essential to mitigate further exposure.
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 10/08/2026
7 sumber eksternal dipantau Tidak cocok
Linimasa deteksi
-
VirusTotal
5 → 6
-
VirusTotal
5 → 12
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of onchain-vsip.com · checked Jun 27, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive