onyxdao-mainnet[.]com

The domain onyxdao-mainnet.com is currently active and hosted behind Cloudflare infrastructure, resolving to IP 188.114.97.3, which is geolocated to Canada and associated with Cloudflare, Inc. The domain was registered on April 17 2026 and uses Cloudflare’s DNS service (darwin.ns.cloudflare.com, oaklyn.ns.cloudflare.com). TLS termination is provided by Google Trust Services under the WE1 certificate, indicating a valid HTTPS endpoint despite the underlying malicious intent. HTTP requests return a 403 status code and the page title is "Just a moment...", a common placeholder that offers no insight into the page’s content. The domain appears on three public security blocklists and has been flagged in a single AlienVault OTX pulse, demonstrating that threat‑intel communities have already identified it as malicious. Independent analysis tools assign it a Gridinsoft trust score of 0 / 100, and it is listed by blocklist providers PhishDestroy, MetaMask, and SEAL. These indicators collectively support a high‑risk classification for generic phishing. Because the site’s content has not been publicly captured, the precise phishing vector (e.g., credential harvesting, token hijacking) remains uncertain. Defenders should block DNS resolution for onyxdao-mainnet.com, enforce TLS inspection to capture any encrypted payload, and monitor for outbound connections to the associated IP address. Continuous re‑evaluation is advised in case the domain’s hosting or content changes.