ondo-votes[.]xyz

The domain ondo-votes.xyz emerges as a fresh phishing threat, flagged by one out of 91 vendors on VirusTotal. It is hosted in the United States under Cloudflare, Inc., and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. With a platform risk score of 83/100, it is actively targeting users, likely in a voting-related scam.

Registered on June 20, 2026, and detected the same day by PhishDestroy, ondo-votes.xyz exploits the critical early hours post-registration. This period often precedes widespread antivirus database updates, allowing the domain to operate under the radar. The domain's SSL certificate is issued by Google Trust Services, adding a veneer of legitimacy to its operations.

The domain is already listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL, indicating a rapid response from security entities. Despite limited VirusTotal detections, its presence on multiple blocklists underscores its potential threat. The use of a reputable SSL issuer and hosting by a well-known provider like Cloudflare may further mislead users into trusting the site.

ondo-votes.xyz represents a sophisticated attempt to deceive users, leveraging timely registration and credible hosting to bypass initial security checks. Its detection and blocklisting highlight the importance of early threat identification to mitigate risks associated with phishing campaigns.