ondoislucky[.]com

This domain, ondoislucky.com, is flagged as an active generic phishing site with high-risk indicators. Registered on October 23, 2024, through Network Solutions, LLC, the domain currently resolves to IP 162.241.226.16, hosted on AS31898 (Oracle Corporation) in the US. Infrastructure analysis reveals nameservers ns1.bluehost.com and ns2.bluehost.com, a common hosting provider configuration. The domain returns an HTTP 302 redirect status, suggesting it may be part of a larger redirection chain leading to malicious content, though the final destination remains unconfirmed. A 404 Not Found page title is currently observed, which may indicate temporary downtime or an attempt to evade detection. The domain appears on 15 threat intelligence pulses in AlienVault OTX and is blocked by at least two security blocklists, including PhishDestroy and PhishingDB. Eighteen of 95 security vendors on VirusTotal have flagged the domain as malicious. MX records indicate mail.ondoislucky.com as the primary mail server, which could be leveraged for phishing email campaigns. The SSL certificate, issued by Sectigo Limited, is a standard Domain Validation (DV) type, providing no additional trust indicators. Defenders should treat this domain as actively malicious. Recommended actions include blocking the domain and its resolved IP at the network level, monitoring for associated email traffic, and investigating any redirection chains originating from this domain. The exact phishing target or campaign type remains unconfirmed due to limited page content analysis, but the infrastructure and detection patterns align with known phishing operations.