onyxcyberstrict[.]top

On July 25, 2026, the domain onyxcyberstrict.top was analyzed following a detection of generic phishing. The domain was registered on April 20, 2025 through NameSilo, LLC and is currently taken offline. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The hosting provider is Cloudflare, and the site was observed to support HTTP/3. TLS negotiation uses a certificate issued by Google Trust Services under the WE1 intermediate, indicating a valid HTTPS endpoint.

The page title returned by the server was “Support”, but no further content has been captured because the service is offline. Infrastructure analysis shows the domain appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal reports that one of ninety‑three scanning engines identified the domain as malicious, reinforcing the suspicion of phishing activity. A Gridinsoft trust score of 0 out of 100 further reflects a poor reputation. The limited data set leaves open questions about the exact phishing payload, targeted brand, or victim interaction flow; no evidence of the landing page, credential‑stealing forms, or malicious redirects has been collected.

Defenders should continue to block the domain at network perimeter, update DNS filtering lists, and monitor for any resurgence of the host. Because the domain is hosted behind Cloudflare, any future re‑hosting could reuse the same IP range, so threat‑intel feeds should watch for re‑appearance of the same A record or similar page titles. Continuous scanning with multi‑engine services such as VirusTotal is recommended to capture any new detections, and organizations should verify that internal email filters flag messages containing the domain or its sub‑domains. Until further indicators are observed, the domain should be treated as a confirmed phishing source and remain on blocklists.