ethbonus[.]com

The domain ethbonus.com was identified as a brand impersonation threat targeting GoDaddy. This phishing domain has been taken offline, but its existence underscores the persistent risk of credential theft and fraud. By mimicking a trusted brand like GoDaddy, cybercriminals aim to deceive users into divulging sensitive information or performing financial transactions.

Analysis of ethbonus.com reveals several technical indicators. It was flagged by 1 out of 95 VirusTotal security vendors and appears on one security blocklist. The domain was registered through Dynadot LLC on August 13, 2019, and resolves to IP address 104.77.220.81. Its SSL certificate was issued by GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2, which may have been used to lend legitimacy to the deception. Despite the low detection rate on VirusTotal, the presence on a blocklist and the clear impersonation of GoDaddy warrant heightened vigilance.

Now that ethbonus.com is offline, users who may have encountered this domain should monitor their accounts for suspicious activity and change passwords if any credentials were entered. It is recommended to verify URLs carefully before entering personal information and to enable two-factor authentication on accounts, especially those related to web hosting or domain services. PhishDestroy advises treating any unsolicited communications referencing ethbonus.com as malicious and reporting them to cybersecurity authorities.