rewards-onyx[.]xyz

rewards-onyx.xyz is a high-risk domain that poses a significant threat through brand impersonation. The domain is designed to deceive users into believing it is associated with Ledger, a well-known provider of cryptocurrency hardware wallets. By impersonating Ledger, the domain aims to trick users into divulging sensitive information, such as login credentials or private keys, which can be used to gain unauthorized access to their cryptocurrency accounts.

Analysis indicates that rewards-onyx.xyz has been flagged by 5 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection by automated systems. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 13, 2026, and currently resolves to the IP address 104.21.20.26. The domain appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL, further confirming its malicious nature. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users.

If users have visited rewards-onyx.xyz, they should immediately check their Ledger accounts for any unauthorized activity. It is recommended to change any passwords or credentials that may have been entered on the site. Users should also monitor their cryptocurrency balances and transactions for any signs of fraud. Additionally, users should report the domain to their security teams and avoid clicking on any links or entering personal information on similar suspicious sites in the future.