voting-ondofinance[.]com

The domain voting-ondofinance.com is currently classified as a generic phishing threat. It is associated with the brand name Ondo and features a page title that promotes voting on the $ONDO rewards date. The potential for user information theft is notable, and no specific drainer kit has been identified at this stage.

A precise examination of technical indicators reveals that this domain was created on June 12, 2026. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Analysis from VirusTotal shows a detection score of only 1 out of 95 security vendors, indicating a low level of recognition within the security community. However, it is noteworthy that the domain appears on three security blocklists, specifically blocked by PhishDestroy, MetaMask, and SEAL. The domain resolves to the IP address 172.67.130.117, which is located in the US and is associated with Cloudflare, Inc. This IP address is notable for being part of Autonomous System number 13335, reinforcing the need for vigilance.

Currently, the domain remains active, designated with a high-risk status. Despite being flagged by several security entities, the relatively low detection count on VirusTotal suggests that many security products have yet to identify this domain as a threat. Users and organizations are advised to exercise caution and avoid interacting with this domain. The ongoing risk assessment indicates that further monitoring is required to fully understand any potential impact or additional security measures that may be necessary.