nodeposit-bonus[.]com

This domain, nodeposit-bonus.com, is identified as a brand impersonation threat targeting crypto casino and online gambling platforms. Analysis confirms it is designed to deceive users by mimicking legitimate no-deposit bonus offers, a common tactic in financial fraud and credential harvesting campaigns. The domain is currently offline, but prior activity indicates it was actively used for malicious purposes. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on April 28, 2026, and resolved to the IP address 160.153.0.120. It was flagged by 3 of 95 security vendors on VirusTotal, indicating detection by multiple threat intelligence sources. The domain appears on one security blocklist and holds a trust score of 0/100 from Gridinsoft. Technical indicators include the use of WordPress, MySQL, PHP, Google Analytics, Cloudflare, and HTTP/3, alongside a Google Trust Services SSL certificate. The page title, 'No Deposit Bonus – List and Codes – Free Fun and Bonus at Online Casino,' further confirms its intent to impersonate legitimate gambling promotions. Current status confirms the domain has been taken offline, reducing immediate risk to end users. However, the infrastructure remains a potential vector for future malicious activity. Organizations and individuals are advised to block the domain and associated IP (160.153.0.120) at the network level. Security teams should monitor for similar domains registered through the same registrar or resolving to the same IP range. Users who may have interacted with this domain should reset credentials for any gambling or financial accounts and enable multi-factor authentication where available. Proactive threat hunting for related indicators of compromise is recommended.