onyrat[.]com

This domain is flagged as a high-risk brand impersonation threat targeting users of crypto-based gambling platforms. The site mimics legitimate crypto casino services to deceive visitors into disclosing login credentials, depositing funds, or interacting with malicious smart contracts. Such impersonation often leads to financial theft, unauthorized transactions, or installation of malware designed to drain cryptocurrency wallets. Users may encounter fake promotions, bonus offers, or login portals that closely resemble trusted platforms, increasing the likelihood of successful social engineering attacks. Analysis indicates the domain was registered on June 23, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with newly created suspicious domains. Infrastructure review reveals the domain resolves to IP address 172.67.200.35 and uses an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. VirusTotal detection data shows 1 out of 95 security vendors currently flag the domain as malicious, suggesting early-stage detection or evasion techniques. The domain remains active as of this report, with no takedown actions observed. If you have visited onyrat.com, immediately disconnect any connected wallets or devices from the internet to prevent ongoing data exfiltration. Clear browser cache, cookies, and saved credentials, particularly for crypto-related sites. Review all recent transactions in connected wallets for unauthorized activity and revoke permissions for any suspicious smart contracts using blockchain explorers. Monitor accounts for unusual login attempts or password reset requests. If financial loss occurred, report the incident to relevant authorities and provide transaction hashes as evidence. Avoid re-engaging with the domain or any associated links to prevent further compromise.