bonkbucky[.]com

Analysis as of July 24, 2026 indicates that bonkbucky.com is currently offline, returning HTTP 523 from Cloudflare's edge network, which signals that the origin server is unreachable. The domain was registered on February 21, 2026 through Tucows Domains Inc. and resolves to the Cloudflare IP address 104.21.96.1, advertised as belonging to AS13335 Cloudflare, Inc. in the United States. The TLS certificate presented by the site is issued by Google Trust Services under the WE1 root, confirming that the connection would be encrypted if the site were reachable. The page title reported by scanners is "Bucky", but no additional content has been disclosed publicly.

The domain appears on two security blocklists and has been actively blocked by the PhishDestroy and ScamSniffer filtering services. VirusTotal analysis shows that two of ninety‑three scanning engines flagged the domain as malicious, reinforcing the suspicion of phishing activity. Nameserver records point to bailey.ns.cloudflare.com and morgan.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure.

While the offline status limits immediate payload delivery, the combination of recent creation, use of reputable hosting, a valid SSL certificate, and detection by multiple security vendors suggests that the domain was purpose‑built for a phishing campaign. Defenders should continue to deny any network traffic to 104.21.96.1, propagate the observed blocklist identifiers across proxy and firewall rule sets, and monitor for any re‑activation or domain‑generation patterns that may indicate a resurgence. Additional investigative steps include querying passive DNS for historical resolution data, checking for related domains under the same registrar, and reviewing endpoint telemetry for any attempted connections to the domain before it went offline.