# bonk-airdrop.com — SUSPICIOUS

> Explore the low-risk crypto drainer domain bonk-airdrop.com, its infrastructure, and current offline status to stay protected from emerging threats.

## Summary
PhishDestroy has identified bonk-airdrop.com as a domain associated with low-risk crypto drainer activity. The domain was initially registered on February 21, 2026, and is linked to attempts at illicitly draining cryptocurrency assets through fraudulent airdrop schemes. Although the threat level is currently assessed as low, the domain's activity underscores the ongoing risks posed by deceptive crypto-related campaigns targeting users.

From an infrastructure perspective, bonk-airdrop.com was registered via a now-defunct registrar and triggered alerts on five independent security blocklists. Despite VirusTotal reporting detection by a single security vendor, the inclusion in multiple blocklists suggests a concerning reputation within cybersecurity communities. The domain's age and association with dead domain registration channels highlight the transient nature of such threats. Notably, bonk-airdrop.com appeared to be part of a broader pattern of crypto drainers employing social engineering tactics via airdrop incentives.

Currently, bonk-airdrop.com has been taken offline, reducing immediate risk to the public. PhishDestroy recommends continued vigilance among cryptocurrency users to avoid interacting with suspicious airdrop offers or unknown domains. Security teams should maintain blocklist enforcement and monitor for any future re-emergence linked to this or related infrastructure. Users are encouraged to verify the legitimacy of crypto promotions through official channels and leverage multi-factor authentication to secure digital assets.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Scam type: Airdrop Scam
- Page title: BONK Airdrop

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["ns1.verification-hold.suspended-domain.com", "ns2.verification-hold.suspended-domain.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["CRDF"]
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "Enkrypt"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01998c87-f026-75ff-a9f8-94e5460f876c.png
- PhishDestroy: https://phishdestroy.io/domain/bonk-airdrop.com/
- LLM endpoint: https://phishdestroy.io/domain/bonk-airdrop.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bonk-airdrop.com/
Last updated: 2026-03-19