appondo.finance
“Explore | Ondo Finance”
appondo.finance — 클로킹됨 · 접근 가능 (HTTP 200). 브랜드 사칭: Ondo; 사기 유형: Credential Phishing. 증거 요약: VirusTotal 11/89 (alphaMountain.ai, BitDefender, ESET, Fortinet, G-Data); URLQuery 2 alerts; 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 100/100. 등록기관: Web Commerce Communica….
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
증거 요약
PhishDestroy identifies appondo.finance as an active crypto drainer phishing domain posing as a cryptocurrency service platform. This domain is designed to deceive users into connecting wallets, enabling unauthorized token transfers via malicious smart contract interactions. The threat level is elevated due to active infrastructure and minimal detection coverage across security vendors.
This domain resolves to IP address 188.114.96.3 and was registered on September 12, 2025, via Web Commerce Communications Limited dba WebNic.cc. Appondo.finance is flagged by only 2 out of 95 VirusTotal security vendors and holds a valid SSL certificate issued by Google Trust Services. Its recent creation and low detection rate suggest a fast-evolving threat with limited exposure in threat intelligence feeds.
To mitigate risk, avoid visiting or interacting with appondo.finance. Users should verify website authenticity through official channels and inspect wallet connection prompts for suspicious permissions. Enable wallet transaction alerts and revoke unknown smart contract approvals immediately. Report this domain to security platforms and avoid sharing credentials or wallet access.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | app.ondno.finance |
malicious | Sinkholed |
| DNS4EU | app.ondno.finance |
malicious | Sinkholed |
Forensic History & Detection Timeline
-
Domain Status Transition Sep 19, 2026 · 00:08 UTCDomain state transitioned from alive to dead.
위협 대응 Pipeline
공개 차단 목록 상태
Evasion evidence
Cloaking confirmed: scanners and victims see different content
The page served one response to a browser-like visitor and another to a crawler or security scanner. Cloaking exists only to keep reviewers away from the real landing page.
- Stored cloaking flag
- Observed
- 클로킹 유형
content_divergence- 클로킹 점수
- 1/6
- Last cloaking scan
- Server header seen by scanner
Apache
Scanner note: parked: raw=parked; http=200; via=https_proxy; server=Apache
저장된 캡처 · 3 sources
도메인 인텔리전스
기술 세부 정보DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
기술 · 4 identified
VirusTotal 분석
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of appondo.finance · checked May 13, 2026
커뮤니티 신고
커뮤니티 구성원 1명이 신고 · 최초 확인 2026년 5월 13일
- 저장된 신고
- 1
- 신고된 고유 URL
- 1
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.