onchaindsa[.]com

The domain onchaindsa.com has been identified as a high-risk threat impersonating the Phantom brand. This domain was registered on April 17, 2026, through Gname.com Pte. Ltd., and currently resolves to the IP address 188.114.96.3, located in Canada and served by CloudFlare, Inc. The domain's infrastructure utilizes CloudFlare's nameservers, braelyn.ns.cloudflare.com and jermaine.ns.cloudflare.com, which are common for websites using CloudFlare's DNS services. However, the use of CloudFlare does not imply safety, as it is a popular choice for both legitimate and malicious actors. Analysis indicates that onchaindsa.com has a Gridinsoft trust score of 0/100, indicating a lack of trustworthiness. The SSL certificate for the domain is issued by Google Trust Services / WE1, which can lend an air of legitimacy to unsuspecting users. Despite the SSL certificate, 3 out of 95 security vendors on VirusTotal have flagged this domain as malicious, suggesting that it is actively being monitored and assessed by the cybersecurity community. The domain also appears on 3 security blocklists, further emphasizing its potential threat. The page title for onchaindsa.com is 'Phantom,' which aligns with the brand impersonation threat. This domain is currently blocked by PhishDestroy, MetaMask, and SEAL, indicating that these organizations have taken proactive measures to protect their users. The HTTP status code 200 confirms that the website is active and accessible. Given the high risk level and the active status of the domain, defenders should monitor for any attempts by their users to access this site and consider implementing additional blocks or warnings in their network infrastructure to prevent potential compromise. It is also advisable to educate users about the dangers of brand impersonation and to verify the authenticity of websites before interacting with them.