bet-bonuus1000[.]top

Analysis of bet-bonuus1000.top indicates that the domain was created on April 28, 2026 and is currently taken offline. The domain resolves to the IP address 172.67.189.17, which belongs to AS13335 Cloudflare, Inc., placing the hosting infrastructure within the United States. Both authoritative nameservers, hans.ns.cloudflare.com and paityn.ns.cloudflare.com, are Cloudflare‑managed, confirming that the site leveraged Cloudflare’s CDN and DNS services. Registration was performed through NICENIC INTERNATIONAL GROUP CO., LIMITED, and the SSL certificate presented is issued by Let’s Encrypt (E8), a typical choice for rapidly deployed malicious sites.

Gridinsoft assigned a trust score of 0 out of 100, reflecting a lack of confidence in the domain’s legitimacy. The domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy platform, providing additional external confirmation of malicious intent. VirusTotal scans show that eight of ninety‑one security vendors flagged the domain, reinforcing the suspicion of abuse. The available evidence points to a generic phishing campaign, though the specific lure or credential‑stealing page content has not been captured.

Uncertainty remains regarding the exact phishing payload, target audience, and any associated command‑and‑control infrastructure, as no page title or additional host artifacts have been disclosed. Defenders should add bet-bonuus1000.top to URL filtering and DNS block lists, monitor for any re‑registration attempts, and enforce outbound traffic controls to Cloudflare‑hosted IP ranges that may be used for rapid redeployment. Continuous telemetry collection from endpoint and network sensors is advised to detect any residual activity that could originate from this infrastructure.