bonk-trial[.]site

PhishDestroy identifies bonk-trial.site as an active crypto drainer posing as a Bonk token trial platform. This domain was flagged under generic phishing due to its deceptive nature, designed to trick users into connecting wallets and draining cryptocurrency assets. The infrastructure relies on a Let's Encrypt SSL certificate (common for malicious sites to appear legitimate) and resolves to IP 185.199.108.153. Notably, VirusTotal currently shows zero detections (1/95), suggesting it has evaded initial automated scanning. Registered through HOSTINGER operations, UAB on August 3, 2025, the domain exhibits red flags including recent creation and hosting provider abuse potential. While unlisted on major blocklists at this stage, its low detection rate and suspicious activity warrant immediate attention.

Technical analysis reveals this domain is part of a broader campaign targeting Solana ecosystem users familiar with Bonk token initiatives. The threat actor leverages social engineering by impersonating legitimate trial platforms to harvest private keys or initiate malicious transactions. Key indicators include the use of a free SSL certificate (common in phishing kits) and hosting on infrastructure known for accommodating malicious activity. The absence of detections suggests either a very recent deployment or evasion techniques like IP rotation or domain fronting. Users interacting with this domain risk immediate financial loss through unauthorized wallet access or transaction manipulation.

If you visited bonk-trial.site, disconnect your wallet immediately and revoke any connected permissions via your wallet's interface or tools like Phantom's 'Connected Apps' section. Scan your device for malware using reputable antivirus software, as some drainers deploy keyloggers or clipboard hijackers. Report the domain to PhishDestroy for further analysis and consider rotating all wallet credentials. Enable transaction simulation features in wallets where available, and verify project legitimacy through official channels before engaging with any token trial platforms.