ondoperps[.]site

Analysis Date: July 27 2026. The domain ondoperps.site was registered on July 23 2026 through the registrar HOSTINGER operations, UAB. Its authoritative name servers are atlas.dns-parking.com and hyperion.dns-parking.com, both typical of domain‑parking services. DNS resolution points to the IPv4 address 84.32.84.35, indicating that the hosting infrastructure is active as of the report date. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing platform has identified it as malicious.

VirusTotal has processed the domain with 91 antivirus and URL scanning engines; none of the engines have raised a detection at the time of analysis. The absence of detections does not constitute verification of safety, and the limited number of blocklist listings suggests that the campaign may be in early stages or using low‑profile hosting. No public SSL certificate details, HTTP response codes, or page title information are currently available, leaving the content of the site unverified. The classification provided is “generic phishing,” but without a captured landing page the specific lure or targeted brand cannot be confirmed.

Defenders should add ondoperps.site to network‑level deny lists, monitor DNS queries for the associated name servers, and enforce URL filtering based on the observed blocklist entry. Continuous re‑scanning with VirusTotal and other sandbox services is recommended to capture any future payloads or changes in behavior. Organizations using threat‑intel platforms should correlate this indicator with other observed malicious activity, especially any patterns involving the IP address 84.32.84.35 or the HOSTINGER operations registrar. Until further forensic evidence is obtained, the domain should be treated as active and potentially harmful.