proposalondo[.]xyz

The domain proposalondo.xyz has been identified as a high-risk phishing threat. This domain masquerades as a legitimate portal for 'Ondo Global Markets — Governance Portal' with the intent to deceive users into providing sensitive information. The risk level is high, given the domain's active status and its ability to evade detection by most security vendors, making it a significant threat to unsuspecting users.

The technical analysis of proposalondo.xyz reveals a variety of indicators pointing to malicious activity. This domain resolves to the IP address 188.114.96.3, operated by Cloudflare, Inc. in the United States under AS13335. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, proposalondo.xyz was created on June 20, 2026. The SSL certificate issued by Google Trust Services / WE1 is also noteworthy. The domain appears on three security blocklists and has been flagged by 6 out of 95 security vendors on VirusTotal. It has been blocked by notable security solutions, further substantiating its status as a phishing threat.

Mitigation steps for this type of phishing threat include ensuring that domain filters and blocklists are updated to include proposalondo.xyz. Users should be cautious of unsolicited communications prompting them to visit such portals. Security teams should enhance awareness programs to educate users on recognizing phishing attempts. Implementing multi-layered security protocols can also help in detecting and mitigating such threats effectively.