eligible-bonk[.]fun

The domain eligible-bonk.fun is a generic phishing site designed to deceive users into disclosing sensitive information, such as login credentials or personal data, without impersonating a specific brand or utilizing a known drainer kit. As of the latest verification, eligible-bonk.fun has been taken offline, though its prior activity poses an elevated risk to users who may have interacted with it. The site does not target a particular company, making it a broad, opportunistic phishing threat.

Technical analysis reveals that eligible-bonk.fun was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, and appears on 1 security blocklist (PhishDestroy). The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on December 16, 2025, and resolved to the IP address 172.67.215.96, hosted by Cloudflare, Inc. (AS13335) in the US. No SSL certificate was observed, and the page title displayed 'Nur einen Moment…'. AlienVault OTX recorded the domain in 3 threat intelligence pulses, while Gridinsoft assigned it a trust score of 0/100. Nameservers were derek.ns.cloudflare.com and maleah.ns.cloudflare.com.

Users who suspect they interacted with eligible-bonk.fun should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on affected accounts. Monitor financial and login activity for unauthorized access or fraudulent transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts. If crypto wallet interactions occurred, revoke any suspicious token approvals and consider transferring funds to a new wallet.