avabonus[.]com
“Homepage | Avax.network”
Resumo das evidências
avabonus.com is currently flagged as an active generic phishing site with an elevated risk rating. The domain was registered on May 23 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is hosted on the IP address 172.67.147.71, which is associated with Cloudflare’s network (nameservers ivan.ns.cloudflare.com and june.ns.cloudflare.com). VirusTotal has recorded detections from three of ninety‑one scanning engines, indicating that at least a subset of security products recognize malicious behavior. The domain also appears on a public blocklist and is specifically listed by PhishDestroy as a phishing source, reinforcing the suspicion of abuse.
Infrastructure analysis shows no anomalous ASN or country information beyond the Cloudflare hosting, and no SSL/TLS certificate details have been published in the available intelligence. Likewise, Safe Browsing, Open Threat Exchange (OTX) entries, trust‑score metrics, and page‑title data are not presently disclosed, limiting the depth of technical attribution. The lack of publicly visible page content means that the exact lure or credential‑harvesting technique employed by avabonus.com cannot be confirmed at this time. Defenders should treat any traffic to avabonus.com as hostile.
Recommended actions include adding the domain to local deny lists, updating firewall and proxy rules to block both the FQDN and its resolving IP, and ensuring that endpoint protection products are refreshed to incorporate the three VirusTotal detections. Continuous monitoring of the IP address for new associations and periodic re‑scanning of the domain for updated threat intelligence are advised. Organizations that employ email filtering should also flag messages containing links to avabonus.com as malicious, and users should be warned against clicking any unsolicited links that resolve to this host.
Data Coverage
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 11/08/2026
10 fontes externas monitoradas Sem correspondência
Linha do tempo de detecção
-
VirusTotal
0 → 3
-
Status do domínio
Acessível → Inacessível
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo