# details-ondo.xyz — SUSPICIOUS

> details-ondo.xyz is linked to medium-risk phishing attempts. Stay alert and avoid interacting with this offline domain. Learn more to protect yourself.

## Summary
PhishDestroy identifies details-ondo.xyz as a medium-risk phishing domain designed to deceive users through generic phishing tactics. Such threats pose significant risks, potentially leading to credential theft or unauthorized access to personal information. Despite being taken offline, the domain’s previous activity highlights the importance of vigilance against similar phishing schemes.

The domain was registered on March 12, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and is associated with the IP address 188.114.97.3. Although currently offline, details-ondo.xyz appeared on three security blocklists, and three out of 95 VirusTotal security vendors flagged it for suspicious behavior. The page title 'Ondo Rewards Date' suggests attempts to lure victims with reward-based phishing themes.

Users are advised to avoid interacting with this domain or any related communications and to verify the legitimacy of reward or promotional offers independently. Employing updated security software, enabling multi-factor authentication, and reporting suspicious sites to security teams can help mitigate risks linked to domains like details-ondo.xyz.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Ondo Rewards Date

## Domain Intelligence
- Registered: 2026-03-12 17:07:01
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ainsley.ns.cloudflare.com mike.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["alphaMountain.ai", "Forcepoint ThreatSeeker", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/20StWtsL/56cfa6cd8f1e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/af82bcc4-99ed-445e-a1e3-97b53c817e92
- PhishDestroy: https://phishdestroy.io/domain/details-ondo.xyz/
- LLM endpoint: https://phishdestroy.io/domain/details-ondo.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/details-ondo.xyz/
Last updated: 2026-03-19