onchain-dapp[.]org

The domain onchain-dapp.org is a confirmed phishing site engaged in brand impersonation, specifically targeting users of the cryptocurrency platform Across. This site operated as a seed-phishing, airdrop scam, and wallet-connect phishing campaign, designed to deceive victims into connecting wallets or entering sensitive credentials under the pretense of legitimate Across services. As of the latest verification, onchain-dapp.org has been taken offline, though prior activity posed an elevated risk to users.

Technical indicators confirm the malicious nature of onchain-dapp.org. The domain was flagged by 3 of 95 security vendors on VirusTotal, including CRDF, Gridinsoft, and SOCRadar, with a Gridinsoft trust score of 0 out of 100. It appeared on 4 security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. Registered through HOSTINGER operations, UAB on October 14, 2025, the domain resolved to the IP address 84.32.84.136, hosted by AS47583 Hostinger International Limited in Lithuania. No SSL certificate was present, and the observed page title was 'Home - Chain Protocols'. Nameservers were ns1.dns-parking.com and ns2.dns-parking.com.

Users who interacted with onchain-dapp.org should immediately revoke any token approvals granted to the site via wallet management tools like Etherscan or Revoke.cash. Funds should be transferred to a new, secure wallet to prevent unauthorized access. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand Across to aid in broader mitigation efforts.