bonus-megaetn[.]com

This domain, bonus-megaetn.com, is identified as a phishing site designed to impersonate a legitimate portal for supplemental USDM (USD Margin) token offerings. Analysis of the page title, 'Mega — Supplemental USDM · In Addition to Primary,' indicates an attempt to deceive users into believing they are accessing an official cryptocurrency or financial service platform. The domain specifically targets individuals involved in digital asset transactions, likely aiming to harvest login credentials, private keys, or other sensitive financial information through fraudulent input forms or fake authentication prompts. Infrastructure analysis reveals multiple indicators of malicious activity. The domain is flagged by 2 out of 95 security vendors on VirusTotal, and appears on 4 distinct security blocklists. It was registered on June 10, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. The site resolves to the IP address 104.21.92.234 and employs Cloudflare for content delivery, a common tactic to obscure hosting origins and evade detection. Additionally, the domain is referenced in 2 threat intelligence pulses on AlienVault OTX, further corroborating its malicious classification. Users who have visited bonus-megaetn.com or interacted with its content should immediately cease all engagement and perform a security audit of their systems. Any credentials or sensitive information entered on the site should be considered compromised and revoked. Affected parties are advised to monitor associated accounts for unauthorized transactions and enable multi-factor authentication where available. Network-level blocking of the domain and its resolving IP (104.21.92.234) is recommended to prevent further exposure. If cryptocurrency wallets or private keys were exposed, users should transfer assets to new, secure wallets and review all connected applications for signs of compromise.