ondovoting[.]com

This domain is flagged as a high-risk phishing site designed to impersonate the ONDO ecosystem's rewards distribution portal. The page title, 'OIP-23 · Q2 2026 ONDO Ecosystem Rewards Distribution — Ondo Governance,' suggests a fraudulent campaign targeting cryptocurrency users by mimicking legitimate token reward distributions. Analysis indicates the site is engineered to harvest wallet credentials, private keys, or other sensitive authentication details under the pretense of distributing ecosystem rewards. The domain's infrastructure and thematic content align with known tactics used in cryptocurrency phishing operations, where victims are tricked into connecting wallets or entering seed phrases on malicious interfaces. Infrastructure analysis reveals multiple technical indicators supporting the phishing classification. The domain ondovoting.com was registered on May 19, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious domains. It resolves to the IP address 104.21.57.147, which is protected by Cloudflare, a common obfuscation tactic to conceal hosting origins. The domain is detected by 14 out of 95 security vendors on VirusTotal, and it appears on three independent security blocklists. Additional technical artifacts include the use of Cloudflare Browser Insights and HTTP/3, which may be leveraged to enhance the site's perceived legitimacy or to evade detection by security tools. Users who have interacted with ondovoting.com should assume their credentials or wallet information have been compromised. Immediate actions include revoking any connected wallet permissions, transferring assets to a new secure wallet, and monitoring for unauthorized transactions. If private keys or seed phrases were entered, the compromised wallet should be considered permanently exposed, and all associated funds should be moved to a new wallet with a fresh seed phrase. System scans for malware are recommended, as phishing sites may deploy additional payloads. Users are advised to verify the authenticity of any cryptocurrency reward distribution through official channels only, and to cross-reference domain registration details and infrastructure with known legitimate sources before interacting with any platform.