onchainval[.]com

This domain, onchainval.com, is flagged as a high-risk generic phishing site targeting users of cryptocurrency validator services. Analysis indicates the domain is actively impersonating legitimate on-chain validation platforms to harvest credentials or distribute malicious payloads. As of the latest assessment, the domain remains operational and poses an ongoing threat to users interacting with blockchain infrastructure. Infrastructure analysis reveals the domain was registered on October 19, 2025, through Gname.com Pte. Ltd. and resolves to the IP address 172.67.173.217, hosted on Cloudflare’s AS13335 network. Security vendor detection is minimal but notable, with 1 of 95 VirusTotal engines flagging the domain as malicious. Additionally, the domain appears on three security blocklists and is actively blocked by multiple threat intelligence feeds, including PhishDestroy and MetaMask. The SSL certificate is issued by Google Trust Services (WE1), a common but not inherently suspicious issuer. Current status confirms the domain remains active, with no takedown actions observed. Organizations and individuals are advised to block the domain at the DNS or network level and monitor for connections to 172.67.173.217. Users should verify validator services through official channels only and avoid interacting with unsolicited links or prompts from onchainval.com. Security teams are recommended to correlate logs for any prior exposure to this domain and assess potential credential compromise or unauthorized access attempts.