sahabetbonus2026[.]vip

PhishDestroy identifies sahabetbonus2026.vip as an active phishing domain involved in fraudulent bonus offer scams targeting unsuspecting users. Although no specific brand is impersonated, the domain attempts to lure victims by promising enticing bonuses, a common tactic in online scam kits focused on financial deception. There is no evidence of a sophisticated drainer kit linked to this domain at this time, but the nature suggests the use of typical credential harvesting or fake promotion lures.

The domain sahabetbonus2026.vip was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 18, 2026, and resolves to the IP address 172.67.133.104. Its SSL certificate is issued by Let's Encrypt, which is frequently abused by phishing actors to add legitimacy. VirusTotal currently reports a 4 out of 95 detection rating for this domain, indicating no antivirus or threat detection engines have flagged it yet. There is no mention of Google Safe Browsing blacklisting or other blocklist counts at this time, which aligns with its recent creation and ongoing investigation status.

As of now, sahabetbonus2026.vip remains active and classified under the risk level "under investigation." Security teams are recommended to monitor its activity closely and advise users to avoid interacting with this domain. Given the lack of detections, caution is vital until further intelligence confirms malicious behavior conclusively. Users should refrain from providing any personal or financial information on this site. Phishing defenses and domain monitoring tools should flag sahabetbonus2026.vip to prevent credential compromise or financial loss stemming from fraudulent bonus offer scams.