cursooficial-descontobonus[.]com

Despite being taken down, cursooficial-descontobonus.com represents a notable phishing threat. The domain was detected by PhishDestroy on June 22, 2026, just two days after its creation. It has a platform risk score of 70 out of 100, indicating a significant threat level. Although VirusTotal shows zero detections, this is due to the domain's recent registration and the typical 24-72 hour delay before antivirus databases update. This early detection highlights the domain's freshness rather than its safety.

The domain was hosted on IP 46.202.145.55 in Brazil, under Hostinger International Limited's ASN 47583. It was registered through HOSTINGER operations, UAB. Despite its recent creation, the domain has already been added to three public blocklists, including PhishDestroy, MetaMask, and SEAL. These listings underscore the domain's malicious intent and the rapid response from threat intelligence communities.

Cursooficial-descontobonus.com exemplifies how phishing domains exploit the gap between domain registration and antivirus detection. By targeting users with scams, it poses a risk to those who encounter it before comprehensive blocklist propagation. Such domains often mimic legitimate services to deceive users into providing sensitive information. The swift action to take it offline mitigates immediate threats, but the case serves as a reminder of the importance of proactive threat detection and response.