event-ondo[.]network

The domain event-ondo.network has been identified as a generic phishing threat, specifically designed to steal cryptocurrency via a crypto drainer. This site impersonates legitimate blockchain services to trick users into connecting their wallets and approving malicious transactions. The domain was created on February 21, 2026, and is currently offline, but its brief activity posed significant risk to crypto users.

Technical indicators reveal that event-ondo.network was flagged by 1 out of 95 security vendors on VirusTotal, and it appears on 4 security blocklists. The domain resolves to IP address 213.111.154.75 and uses an R11 SSL certificate. It was not listed on Google Safe Browsing (GSB) at the time of analysis, which may have allowed it to operate undetected by some users. The registrar information is not publicly available, but the domain's recent creation date and rapid takedown suggest a malicious intent.

Currently, the domain is taken offline and displays an "Account Suspended" page, indicating that hosting providers or authorities have intervened. However, users should remain cautious as similar domains may reappear. PhishDestroy recommends avoiding any interaction with this domain and verifying all crypto-related sites through trusted sources. If you have connected a wallet to this site, transfer funds to a new wallet immediately and revoke any token approvals.