blogbonos[.]my

Analysis of the domain blogbonos.my indicates that it is actively being used for phishing. The domain was registered through Dynadot LLC on October 15, 2025, and currently resolves to the IP address 159.100.6.5. The SSL certificate associated with the domain is for globaloffshoremargin.com, which does not correspond to the domain name, raising additional red flags. The domain appears on one known security blocklist, and has a Gridinsoft trust score of 0 out of 100, indicating a high level of distrust. The HTTP status code 200 suggests that the site is operational and accessible. The page title 'Bienvenido' does not provide specific context about the nature of the content, but the combination of a mismatched SSL certificate and low trust score strongly suggests that the domain is being used for malicious purposes. Defenders should treat any communication or links related to blogbonos.my with extreme caution and consider blocking or monitoring access to this domain. Given the current status of the domain as active and its presence on a security blocklist, it is advisable to implement additional security measures such as user education on phishing threats and regular monitoring of network traffic for any suspicious activity involving this domain. The IP location in Germany (DE) under the AS214036 Ultahost, Inc. network further underscores the need for vigilance, as this infrastructure is often associated with hosting malicious content. Defenders should also verify the legitimacy of any similar-looking domains and ensure that their security policies are up-to-date to mitigate the risk posed by this and related phishing sites.