bonus-cult[.]com

This domain is flagged for elevated-risk brand impersonation, specifically targeting Celer, a blockchain interoperability platform. The threat involves fraudulent incentives designed to deceive users into interacting with malicious smart contracts or disclosing sensitive wallet credentials, potentially leading to unauthorized asset transfers or crypto draining attacks. The page title, CLAIM YOUR CULT, reinforces a deceptive narrative to exploit user trust in the targeted brand. Analysis indicates the domain bonus-cult.com was registered on September 30, 2025, through NiceNIC International Group Co., Limited. It resolves to the IP address 188.114.96.3 and has been flagged by 8 out of 95 security vendors on VirusTotal. The domain appears on two security blocklists and is actively blocked by ScamSniffer and PhishDestroy. Additionally, Gridinsoft assigns it a trust score of 0 out of 100, further corroborating its malicious classification. Infrastructure analysis reveals the domain is currently offline, though historical activity suggests it was operational long enough to pose a credible threat. Mitigation steps for this brand impersonation threat include immediate blacklisting of the domain and its associated IP address across all security gateways and endpoint protection systems. Organizations should update detection rules to flag similar domains using permutations of the targeted brand name, particularly those incorporating terms like bonus, claim, or cult. Users should be educated to verify domain authenticity through official brand channels before interacting with any promotional offers, especially those involving crypto asset claims. Wallet protection measures, such as hardware wallets or multi-signature requirements, should be enforced for high-value transactions to mitigate potential crypto draining risks.