bongsol[.]top

The domain bongsol.top is currently classified as a high‑risk generic phishing site that specifically targets victims with a crypto‑related scam. The domain was registered on February 21, 2026 through NameSilo, LLC and resolves to the IP address 45.67.85.152, which is hosted in the United Kingdom under the Kuroit Limited network. Infrastructure analysis shows the web server is Nginx and the site presents a valid Let's Encrypt (R13) TLS certificate. DNS resolution is handled by ns1.dnsowl.com., ns2.dnsowl.com., and ns3.dnsowl.com. The page title returned by the server is "Access Denied" and the HTTP response code is 200, indicating that the site is actively serving content. Reputation data is poor: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on two security blocklists (PhishDestroy and ScamSniffer). VirusTotal reports that four of ninety‑five scanned scanners flagged the domain, reinforcing the malicious assessment. While the exact phishing landing pages and payloads have not been publicly disclosed, the combination of a recent registration, low trust score, blocklist presence, and confirmed crypto scam labeling suggests an active threat infrastructure. Defenders should block network traffic to 45.67.85.152 and add bongsol.top to URL filtering and email security policies. Continuous monitoring of DNS queries for the domain and its associated nameservers is advised, as well as updating intrusion detection signatures to capture any attempted connections. Given the high risk rating, organizations handling cryptocurrency assets should treat any communication from this domain as malicious and quarantine related emails or files pending further analysis.