my[.]fondvault[.]net

The domain my.fondvault.net is a generic phishing site designed to deceive users into disclosing login credentials or other sensitive information. It does not impersonate a specific well-known brand but presents itself as 'FondVault,' a fabricated service, and was actively used in a staking scam. As of the latest verification, my.fondvault.net has been taken offline, though it previously posed an elevated risk to visitors.

Technical analysis of my.fondvault.net reveals limited but notable detection. The domain was flagged by 1 of 95 security vendors on VirusTotal, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). It was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 22, 2026, and resolved to the IP address 94.103.88.245, hosted in Russia by Hosting technology LTD. The site used an SSL certificate issued by Let's Encrypt (E8) and employed technologies such as PHP, Nginx, Cloudflare, and jQuery. The observed page title was 'Войти в Аккаунт | FondVault,' and the HTTP status at the time of assessment was 404.

Users who interacted with my.fondvault.net should immediately change any credentials entered on the site, particularly if reused across other platforms. Enable two-factor authentication (2FA) on all accounts as an additional security measure. Monitor financial and login activity for signs of unauthorized access or fraud. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If cryptocurrency was involved, revoke any token approvals granted to suspicious contracts and consider moving funds to a new wallet.