superbonuslife[.]com

Analysis indicates that superbonuslife.com was registered on May 19, 2026 through Spaceship, Inc. and is hosted on a server located in the Netherlands operated by 3NT SOLUTIONS LLP (IP 38.180.120.239). The domain uses Cloudflare authoritative nameservers (agustin.ns.cloudflare.com, leia.ns.cloudflare.com) and presents a valid Let's Encrypt R12 TLS certificate, suggesting an active HTTPS service that returns HTTP 200. VirusTotal reports that 13 of 92 security vendors have flagged the domain, consistent with its classification as a generic phishing threat. The domain is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the perception of malicious intent. AlienVault OTX records the domain in 16 separate threat pulses, indicating repeated observations across different intelligence sources. While the presence of a valid certificate and HTTP 200 response confirm that the site is operational, no public page content has been examined, leaving the specific phishing tactics and targeted credentials unknown. Defenders should consider adding superbonuslife.com and its resolving IP (38.180.120.239) to deny lists, monitor DNS queries for related domains, and enforce outbound filtering to prevent credential submission. Continuous traffic analysis is recommended to detect any attempted credential harvesting or credential‑stealing payloads associated with this infrastructure.