1ido[.]org
“www.www.1ido.org”
PhishDestroy identifies the domain 1ido.org as an active threat engaged in generic phishing, targeting users with no specific brand impersonation detected. This domain does not currently appear to leverage a known drainer kit but functions as a credential harvesting platform, attempting to deceive victims with a generic phishing page titled "www.www.1ido.org".
The domain 1ido.org yields a VirusTotal detection ratio of 1 out of 95 security vendors, indicating low but non-negligible recognition as malicious. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to the IP address 172.67.154.139 and is secured by an SSL certificate issued by Google Trust Services. This domain was created recently on November 09, 2025, and despite its fresh registration, it lacks a Google Safe Browsing block (GSB status not flagged) and has a limited blocklist presence, which suggests it may evade some automated defenses.
Currently, 1ido.org remains active with an elevated risk level due to its ongoing phishing activity targeting generic credentials. Security teams are advised to monitor and block this domain proactively given its potential for user credential compromise despite a low VirusTotal detection count. Users should avoid interacting with this domain and report any suspicious communications linked to it. Continued vigilance and updates to endpoint protections will help mitigate exposure as threat intelligence evolves.
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber · disinkronkan 09/08/2026
Bukti hasil tersimpan
Hasil dan atribusi penonaktifan
- Hasil
held- Penyebab
registrar_client_hold- Pelaku
- NICENIC INTERNATIONAL GROUP CO., LIMITED
- Mekanisme
client_hold- Tingkat keyakinan
- 95%
Tindakan registrar
NICENIC INTERNATIONAL GROUP CO., LIMITED IANA 3765
Bukti atribusi:
Perkiraan waktu tidak tersedia
Rentang ketidakpastian: ±2515.09 h Presisi waktu:very_low Linimasa deteksi
Pengamatan tersimpan dalam urutan kronologis.
-
Ketersediaan
Ketersediaan: pertama kali diamati sebagai dns_inactive
f93a11f87e4d -
Ketersediaan
Ketersediaan: dns_inactive → unknown
25c711c458e5 -
Ketersediaan
Ketersediaan: unknown → dns_inactive
f69af090fd4e -
Ketersediaan
Ketersediaan: dns_inactive → held
7ae302f89ede -
Ketersediaan
Ketersediaan: held → dns_inactive
f52d526b76a1 -
Ketersediaan
Ketersediaan: dns_inactive → unknown
09c219cb984a -
Ketersediaan
Ketersediaan: unknown → held
15d98a3d41c3 -
Ketersediaan
Ketersediaan: held → unknown
5bbf4bed9ecd -
Ketersediaan
Ketersediaan: unknown → dns_inactive
6dfe9145995c -
Ketersediaan
Ketersediaan: dns_inactive → held
51c7e99bab90
Tampilkan semua (6)
-
Ketersediaan
Ketersediaan: held → dns_inactive
641ed81dc4d5 -
Ketersediaan
Ketersediaan: dns_inactive → unknown
4cde599c3e22 -
Ketersediaan
Ketersediaan: unknown → held
d860533c9cd2 -
Ketersediaan
Ketersediaan: held → unknown
37870f833b21 -
Ketersediaan
Ketersediaan: unknown → dns_inactive
d0b7046e8c2f -
Ketersediaan
Ketersediaan: dns_inactive → held
bff0469999d3
Intelijen komunitas
1 laporan komunitas
KategoriPHISHING
Detection Summary The Anti-Phishing Volunteers & Associates Security Incident Response System has flagged this as a domain threat, classified as phishing attack against Lido Finance. Threat detected at 2026-03-26T00:42:09.056Z.
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Intelijen Forensik
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive