hoki234pildun[.]bond

PhishDestroy’s automated threat scanners have flagged hoki234pildun.bond as an active scam domain designed to impersonate a legitimate gaming portal and harvest user credentials. The site is currently resolving to IP 172.67.206.171 and is served over an HTTPS connection issued by Let’s Encrypt, which increases its perceived legitimacy to potential victims. Despite its recent registration on April 25, 2026, the domain has already begun redirecting traffic to credential-stealing pages, indicating an operational campaign rather than a dormant placeholder. Technical indicators confirm the threat is both real and escalating. VirusTotal currently shows 0 detections out of 95 engines, meaning traditional antivirus signatures have not yet caught up with the campaign. The domain was registered through Namecheap Inc., a popular registrar that has been abused in numerous phishing operations due to lax identity verification and bulk registration options. With zero detections and a fresh creation date, the window for proactive blocking is narrow, increasing the risk of successful compromise for unsuspecting users. If you have visited hoki234pildun.bond, immediately cease any input of personal or financial data and clear your browser cache and cookies. Run a full system scan using updated antivirus software and consider changing passwords for any accounts that may have been exposed. Report the domain to your email provider, browser vendor, and cybersecurity platforms such as PhishDestroy, abuse@namecheap.com, and abuse@cloudflare.com (since the IP is on Cloudflare’s network). Monitor financial accounts closely for unauthorized transactions. Proactive reporting helps block the domain across security networks before additional victims are compromised.