onchain-net[.]com

The domain onchain-net.com is a generic phishing site designed to deceive users into disclosing sensitive information or credentials. It does not impersonate a specific brand and is not linked to a known crypto drainer kit. As of the latest verification, onchain-net.com has been taken offline, but it previously posed an elevated risk of phishing attacks targeting unsuspecting visitors.

Technical indicators confirm the malicious nature of onchain-net.com. The domain was flagged by 3 of 95 VirusTotal security vendors and appears on 4 security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 27, 2025, it resolved to the IP address 172.67.138.163, hosted by Cloudflare, Inc. (AS13335) in the US. No SSL certificate was issued, and the domain had only one nameserver. Gridinsoft assigned it a trust score of 0 out of 100, further indicating its high-risk status.

Users who interacted with onchain-net.com should take immediate safety steps. If credentials or login details were entered, change passwords for all associated accounts and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions. To help prevent further abuse, report the domain to anti-phishing organizations such as the Anti-Phishing Working Group (APWG) or local cybersecurity authorities.