onyxdao[.]cloud

The domain onyxdao.cloud was a generic phishing site designed to deceive users into disclosing sensitive information or executing unauthorized transactions. It did not impersonate a specific brand or deploy a known drainer kit. As of the latest verification, onyxdao.cloud has been taken offline, but its prior activity poses an elevated risk to users who may have interacted with it.

Technical indicators confirm the malicious nature of onyxdao.cloud. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. It appeared on 4 security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. Registered through HOSTINGER operations, UAB on September 16, 2025, the domain resolved to the IP address 92.113.16.2, hosted in Germany under AS47583 (Hostinger International Limited). No SSL certificate was present, and the observed page title was 'Bot Verification'. The domain used nameservers ns1.dns-parking.com and ns2.dns-parking.com and returned an HTTP 429 status at the time of analysis.

Users who visited onyxdao.cloud should assume their credentials or session tokens may have been compromised. For credential phishing, immediately change passwords for any accounts accessed during the exposure period, enable two-factor authentication, and monitor accounts for unauthorized activity. If financial or cryptocurrency transactions were attempted, revoke any token approvals and transfer funds to a new, secure wallet. Report the domain to relevant platforms, including Google Safe Browsing, PhishTank, and the registrar (HOSTINGER operations, UAB), to aid in mitigation efforts.