crypto-onwallet[.]com

The domain crypto-onwallet.com has been identified as a sophisticated phishing site that impersonates the well-known cryptocurrency platform Crypto.com. Its primary threat is brand impersonation, designed to trick users into entering their login credentials and other sensitive information, which could lead to the theft of digital assets. As of the latest analysis, this domain is offline, indicating that it has been taken down by authorities or hosting providers after being flagged as malicious.

Technical indicators paint a clear picture of malicious intent. The domain was created on September 8, 2025, and is registered through Gname.com Pte. Ltd., a registrar often associated with high-risk domains. It resolves to IP address 47.243.29.133 and uses an SSL certificate from Let's Encrypt (E8), which provides a false sense of security. VirusTotal data shows that 13 out of 95 security vendors flag this domain as malicious, and it appears on two security blocklists. Google Safe Browsing also flags it for phishing activity. These data points confirm that crypto-onwallet.com is a confirmed phishing site targeting Crypto.com users.

Currently, the domain is offline, meaning it is no longer accessible to users. However, similar domains may still be active or appear in the future. Users who have interacted with this site should immediately change their Crypto.com passwords and enable two-factor authentication. To stay safe, always verify any crypto-related website's legitimacy on PhishDestroy before entering credentials or connecting wallets. Avoid clicking on unsolicited links and double-check URLs for subtle misspellings or extra characters like "onwallet" which deviate from the official Crypto.com domain.