Analysis indicates that web-bonmy.vip is an active phishing domain registered on July 18, 2026, through Dynadot Inc. The domain resolves to the IP address 203.189.235.157 and utilizes nameservers a.share-dns.com, a8.share-dns.com, b.share-dns.net, and b8.share-dns.net. As of July 28, 2026, the domain appears on one security blocklist and is blocked by PhishDestroy. VirusTotal reports that 4 out of 91 security vendors flag this domain, suggesting malicious activity.
The infrastructure analysis reveals no additional brand targeting or scam classification beyond generic phishing, and the exact content of the site remains unconfirmed. The domain's recent registration, combined with its presence on security blocklists and detection by multiple vendors, supports the assessment of high risk. Defenders should treat this domain as malicious and consider implementing network-level blocks for the IP 203.189.235.157 and associated nameservers.
Organizations using PhishDestroy or similar security tools may already have protections in place. No further details about the phishing kit, targeted brand, or specific lure type are available at this time. Continued monitoring is recommended to track any changes in detection status or infrastructure.