ponsdotfamily[.]info

Analysis of the domain ponsdotfamily.info indicates a high-risk phishing infrastructure targeting users through a purported family support portal. The domain was registered on July 27, 2026, via NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with recently created malicious domains. Infrastructure analysis reveals Cloudflare nameservers (anna.ns.cloudflare.com and ruben.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. The domain resolves to IP address 172.67.138.118, which is part of Cloudflare’s network, further complicating attribution and mitigation efforts.

As of July 31, 2026, ten out of ninety-one security vendors on VirusTotal have flagged ponsdotfamily.info as malicious, with detections spanning phishing and generic threat classifications. The domain appears on one security blocklist, specifically PhishDestroy, which categorizes it as an active phishing threat. No additional brand-specific targeting or scam categorization (e.g., shipping, investment, or crypto-related) is confirmed in the available data, and the exact content of the site remains unanalyzed. The domain’s registration recency, combined with its detection by multiple security vendors and presence on a blocklist, suggests it is actively being used for malicious purposes.

Defenders should treat this domain as a high-risk indicator. Network-level blocking of 172.67.138.118 and ponsdotfamily.info is recommended, alongside monitoring for related domains registered through the same registrar or utilizing Cloudflare nameservers. Given the domain’s recent creation and limited visibility in threat intelligence feeds, further investigation into its hosting infrastructure and associated campaigns is warranted. No evidence links this domain to a specific phishing kit or brand impersonation beyond the implied family support theme in its name.