dashboard-ondo[.]finance

Analysis of the domain dashboard-ondo.finance, observed as offline on July 25, 2026, indicates that the site was used for generic phishing. The domain is delegated to Cloudflare nameservers coen.ns.cloudflare.com and coraline.ns.cloudflare.com and resolves to IP address 172.67.215.39, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Registration data show the domain was created on 21 February 2026 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. No TLS certificate is presented for the host, suggesting that HTTPS was not enabled at the time of observation.

The page title returned by the server is “Even geduld…”, but the page content has not been captured, so the exact phishing lure or targeted brand remains unknown. Threat intelligence platforms have reported minimal detection: two of ninety‑three VirusTotal scanners flagged the domain, and it appears on a single external blocklist. The Gridinsoft trust score is 0 out of 100, indicating a high likelihood of malicious intent. The domain has been listed by the PhishDestroy blocklist, confirming its classification as a phishing resource.

Given the Cloudflare front‑end, the lack of SSL, and the low trust score, the infrastructure appears typical of fast‑flux or temporary phishing deployments that rely on shared hosting. Defenders should continue to block the IP 172.67.215.39 and the domain dashboard-ondo.finance at network perimeters and DNS resolvers. Monitoring for re‑registration or re‑activation is advised, as threat actors may reuse the same registrant or hosting provider for future campaigns. Incident responders should treat any traffic to this domain as malicious and investigate associated logs for potential credential harvesting attempts.