ondoglobal[.]co
ondoglobal.co 피싱 및 보안 점검
“Explore | Ondo Finance”
ondoglobal.co — 마지막으로 알려진 활성 (HTTP 200). 사기 유형: Brand Impersonation. 증거 요약: VT 4/91 (alphaMountain.ai, CRDF, Gridinsoft, SOCRadar); URLQuery 2 det.; URLScan no malicious verdict; GSB no flag; Spamhaus DBL_PHISH; BL 2 (MetaMask, SEAL); PD 88/100. 등록기관: Global Domain Group.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
PhishDestroy first observed ondoglobal.co on Jun 30, 2026. The captured page title is “Explore | Ondo Finance”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 88/100 (critical).
Positive findings are stored from 5 sources: VirusTotal, MetaMask, SEAL, Spamhaus DBL, and URLQuery. VirusTotal recorded 4 detections among 91 engines: alphaMountain.ai, CRDF, Gridinsoft, SOCRadar on Jul 31, 2026 at 02:09 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 22:20 UTC. Spamhaus DBL: DBL_PHISH on Jul 30, 2026 at 22:31 UTC. URLQuery recorded 2 detections; no observation timestamp was retained. Non-positive and contextual checks: On Jun 30, 2026 at 17:20 UTC, AlienVault OTX listed 2 community pulse references (not vendor detections); Google Safe Browsing returned no flag. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:31 UTC.
HTTP 200 was recorded on Aug 7, 2026 at 22:19 UTC. Registration records for the domain list Global Domain Group LLC as the registrar and Jun 25, 2026 as the creation date. Registration preceded first observation by 4 days. At collection time, the hostname resolved to 172.67.222.206 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Jun 30, 2026 at 18:20 UTC returned 88/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Google Trust Services / WE1 as the certificate issuer with validity through Sep 23, 2026; checked Jun 30, 2026 at 19:00 UTC.
The content indicators and 5 positive source findings support the current brand impersonation classification.
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 5 identified
JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 신뢰도 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 신뢰도 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 신뢰도 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 신뢰도 100%VirusTotal 분석
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.