onchainr[.]pro

The domain onchainr.pro is identified as a generic phishing site specializing in cryptocurrency wallet recovery fraud. Analysis confirms its current status as offline, though it previously operated under the page title 'RecoveryAsset - Secure Wallet Recovery.' This domain does not impersonate a specific well-known brand but instead mimics generic wallet recovery services to deceive users into disclosing private keys or seed phrases. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain was flagged by 2 of 95 security vendors on VirusTotal and appears on one security blocklist. Registered on April 01, 2026, through HOSTINGER operations, UAB, it resolves to the IP address 64.29.17.65. Additional threat intelligence sources, including AlienVault OTX, have documented this domain in one threat intelligence pulse. The Gridinsoft trust score for this domain is 0 out of 100, further confirming its high-risk classification. Detected technologies include Vercel for hosting and HTTP Strict Transport Security (HSTS) implementation, which may be leveraged to lend a false sense of legitimacy. Given the elevated risk level and confirmed phishing activity, users are strongly advised to avoid interaction with this domain. Any credentials or sensitive information previously submitted should be considered compromised. Cryptocurrency wallet holders are recommended to verify recovery services exclusively through official channels and enable multi-factor authentication where available. Organizations should update security blocklists to include this domain and its associated IP address to prevent future access attempts. Monitoring for related domains registered through the same registrar or resolving to the same IP may help identify additional threats in this campaign.