governances-onyx[.]com

The domain governances-onyx.com was registered on July 22, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolving to the IPv4 address 62.60.226.88. Google Safe Browsing has flagged the domain for social engineering, indicating that it is being used to lure victims into divulging credentials or personal information. The domain is listed on three independent security blocklists and is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering platforms, reinforcing its classification as a malicious resource.

VirusTotal analysis shows that three of ninety‑one scanned security vendors have raised detections against the domain, providing additional corroboration of its hostile intent. Infrastructure observations reveal the authoritative name servers coco.bunny.net and kiki.bunny.net, which can be used as ancillary indicators for network‑level blocking. The threat is catalogued as generic phishing with a high risk rating and remains active as of the report date, July 26, 2026.

No public page title, SSL certificate details, or HTTP response codes have been disclosed, and the exact phishing lure or impersonated brand has not been identified in the available intelligence. Given the limited but consistent evidence—registration date, hosting IP, Safe Browsing flag, blocklist presence, and vendor detections—defenders should prioritize immediate mitigation: add governances-onyx.com to DNS sinkhole or firewall deny lists, monitor outbound connections to 62.60.226.88, and incorporate the observed nameserver pattern into intrusion‑detection signatures. Continuous monitoring is advised to capture any future payload changes or additional infrastructure that may emerge as the campaign evolves.