# PhishDestroy domain threat record: bonkdao.net Content language: English Canonical HTML report: https://phishdestroy.io/domain/bonkdao.net/ Machine-readable companion: https://phishdestroy.io/domain/bonkdao.net/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 15:25:32 UTC - Last availability or vendor check: 2026-10-21 15:25:32 UTC - Stored record updated: 2026-10-21 16:01:55 UTC - VirusTotal detections in the stored snapshot: 2/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.97.3 - Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-07-09 04:24:06 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15f10-6379-700c-b76f-7af0230b2ece/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bonkdao.net - Certificate Transparency search: https://crt.sh/?q=%25.bonkdao.net - Web Archive lookup: https://web.archive.org/web/*/https://bonkdao.net/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added bonkdao.net to its internal blocklist after a URLScan scan returned a malicious verdict on 2026-10-21. The intake AI noted that the page content was insufficient to identify a specific threat. An HTTP GET on 2026-10-21 returned status 200 for the /phone.html page. How the scam works Listings of this type often indicate sites that may host phishing pages, fraudulent token offers, or wallet‑draining interfaces, but the available evidence does not reveal a concrete mechanism. No specific impersonation or credential‑harvesting behavior was observed on the captured page. Evidence URLScan recorded a malicious verdict with a score of 98 and associated tags on 2026-10-21. VirusTotal reported two detections, both labeled as spam by Fortinet and alphaMountain.ai, out of 92 scanning engines on the same date. Google Safe Browsing did not flag the domain as of 2026-10-21. External blocklists MetaMask and SEAL both list bonkdao.net, and OTX references the domain in three pulses. PhishDestroy’s internal list marks the domain as blocked. Infrastructure The domain was registered on 2026-07-09 with NICENIC INTERNATIONAL GROUP CO., LIMITED and carries clientDeleteProhibited and clientTransferProhibited status, expiring on 2027-07-09. Hosting is provided through Cloudflare, with recorded IP addresses 188.114.97.3 and 104.21.41.128 associated with the CloudFLARENET-EU network, recorded in Great Britain. The TLS certificate, issued by Google Trust Services, is valid from 2026-09-06 to 2026-12-05 and covers bonkdao.net and its subdomains. What to do Avoid entering credentials or connecting cryptocurrency wallets to this site; if credentials were entered, change the associated passwords promptly. Organizations should block bonkdao.net at the network perimeter and review access logs for connections to the recorded IPs or Cloudflare endpoints. Continue monitoring reputation feeds for any updates on this domain. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15f10-6379-700c-b76f-7af0230b2ece/ Cloudflare Radar report: https://radar.cloudflare.com/scan/8a611d2a-d7f6-441a-aacb-957a7ea8e481 Stored capture screenshot: https://i.ibb.co/wh1tvTTw/d525ff74e43c.png Cloudflare Radar screenshot: https://screenshots.phishdestroy.io/cf/8a611d2a-d7f6-441a-aacb-957a7ea8e481.png URLScan screenshot (2026-10-21T01:07:08Z): https://screenshots.phishdestroy.io/us/01a15bff-4e74-7300-948d-28a174af50bc.png URLScan capture report: https://urlscan.io/result/01a15bff-4e74-7300-948d-28a174af50bc/ VirusTotal report: https://www.virustotal.com/gui/domain/bonkdao.net Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bonkdao.net Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-21 16:01:47 UTC ## Stored page captures - Primary capture: https://i.ibb.co/wh1tvTTw/d525ff74e43c.png Captured: 2026-10-21 15:25:32 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a15f10-6379-700c-b76f-7af0230b2ece.png Captured: 2026-10-21 15:25:32 UTC Source report: https://urlscan.io/result/01a15f10-6379-700c-b76f-7af0230b2ece/ - URLScan capture 2: https://urlscan.io/screenshots/01a15bff-4e74-7300-948d-28a174af50bc.png Captured: 2026-10-21 15:24:20 UTC Source report: https://urlscan.io/result/01a15f10-6379-700c-b76f-7af0230b2ece/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8a611d2a-d7f6-441a-aacb-957a7ea8e481.png Source report: https://radar.cloudflare.com/scan/8a611d2a-d7f6-441a-aacb-957a7ea8e481 SHA-256: aa5cc80e746f9098fb494a40d58cebd7f8ac76b6c56c41868dfbb726d7e7bced - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15bff-4e74-7300-948d-28a174af50bc.png Captured: 2026-10-21 01:07:08 UTC Source report: https://urlscan.io/result/01a15bff-4e74-7300-948d-28a174af50bc/ SHA-256: 90d6df06f00c67a0203ab5c10a92d3efa2eab56006c598ed5e868442a57e8ac6 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T16:00:42Z", "uuid": "01a15f10-6379-700c-b76f-7af0230b2ece", "scanned_at": "2026-10-21T15:24:55Z", "final_url": "https://bonkdao.net/phone.html", "status": 200, "redirected": "same-domain", "redirects": [ { "to": "https://bonkdao.net/", "from": "http://bonkdao.net/", "status": 307 }, { "to": "https://bonkdao.net/phone.html", "from": "https://bonkdao.net/" } ], "ip": "104.21.41.128", "domains": [ "api.web3modal.org", "fonts.gstatic.com", "fonts.googleapis.com", "api.ipify.org", "cdnjs.cloudflare.com", "pulse.walletconnect.org", "secure.walletconnect.org", "cdn.jsdelivr.net", "static.cloudflareinsights.com" ], "ips": [ "192.178.155.94", "104.20.34.30", "172.253.122.95", "104.18.19.237", "172.66.157.155", "104.17.208.5", "104.26.12.205", "104.17.25.14", "104.16.80.73", "104.21.41.128" ], "asns": [ "15169", "13335" ], "countries": [ "US" ], "link_domains": [ "bonkuji.com", "www.bonkcoin.com", "x.com", "discord.com", "www.instagram.com", "medium.com", "t.me", "www.youtube.com", "build.bonkcoin.com", "brand.bonkcoin.com", "www.bonkcoindao.org", "luma.com", "bonkadvisory.com", "www.bonkinc.com" ], "social": [ "https://x.com/bonk_inu", "https://discord.com/invite/qaQa6M6mN2", "https://www.instagram.com/official_bonk_inu", "https://medium.com/@bonk_inu", "https://t.me/Official_Bonk_Inu", "https://www.youtube.com/@bonk_inu" ], "doc_hash": "f94a4721987666f323cd3c27ce3abdb91155a342ff0cf395cb3f58a6bf821a34", "script_hashes": [ "c1e83ddf7f5da68ca5d2532dc01a25510d6b42b916a4923c13d7b71e3650041e" ], "globals": [ "uJbEUX", "EGeahbE", "a", "l3JEhAB", "__globalObject", "__TextDecoder", "__Uint8Array", "__String", "__Array", "utf8ArrayToStr", "gPxb1c", "b", "c", "d", "bEAFIw", "CQaZYo", "M92DdG5", "ff445b748a92c4add9", "f348d9659f87941e", "e9dbb89add", "a5a58468", "f6d732f4d9", "ad7eab133e47206211", "_myrrsqrpa", "Buffer", "global", "process", "litPropertyMetadata", "reactiveElementVersions", "litHtmlVersions", "litElementVersions", "_dvuipsjpcqvhmwvap", "CoinbaseWalletSDK", "CoinbaseWalletProvider", "WalletLink", "WalletLinkProvider", "CryptoJS", "_ethers", "ethers", "windowHandler" ], "cookies": [ "gacfxdn1x7" ], "storage_keys": [ "@appkit/active_caip_network_id" ], "tls": { "san": [ "bonkdao.net", "*.bonkdao.net" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "bonkdao.net", "protocol": "QUIC", "valid_to": "2026-12-05T07:15:58Z", "valid_from": "2026-09-06T06:17:26Z" }, "domain_age_days": 104, "apex_age_days": 104, "tls_age_days": 45, "tls_valid_days": 90, "requests": 53, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "frame-ancestors http: https:", "x-content-type-options": "nosniff" } }, "vt": { "v": 1, "fetched_at": "2026-10-21T15:59:02Z", "analysis_at": "2026-10-21T03:08:41Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 0, "suspicious": 2, "undetected": 37 }, "detections": { "Fortinet": "spam", "alphaMountain.ai": "spam" }, "reputation": 0, "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-07-09T06:24:06Z", "expires": "2027-07-09T06:24:06Z", "updated": "2026-07-09T06:34:48Z", "first_seen": "2026-07-09T06:49:54Z", "dns": [ { "ttl": 300, "type": "A", "value": "172.67.164.254" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::6815:2980" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::ac43:a4fe" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "jermaine.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "jermaine.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "sara.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.41.128" } ], "dns_at": "2026-10-21T03:10:01Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "bonkdao.net", "*.bonkdao.net" ], "issuer": "Google Trust Services / WE1", "serial": "c86eb8cb191adfbf1346b01c1b55d80d", "sha256": "be8e52b5a7a1e8fd53153ee185d9d1c0719750e61b6867b6d2d90cf5d3369220", "subject": "bonkdao.net", "valid_to": "2026-12-05T07:15:58Z", "valid_from": "2026-09-06T06:17:26Z" }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "registrar_iana_id": "3765", "registrar_url": "https://nicenic.com", "created": "2026-07-09T06:24:06Z", "updated": "2026-07-09T06:24:06Z", "expires": "2027-07-09T06:24:06Z", "status": [ "clientDeleteProhibited", "clientTransferProhibited" ], "nameservers": [ "jermaine.ns.cloudflare.com", "sara.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client delete prohibited", "client transfer prohibited" ], "events": { "expiration": "2027-07-09T06:24:06Z", "registration": "2026-07-09T06:24:06Z", "registrar expiration": "2027-07-09T06:24:06Z", "last update of RDAP database": "2026-07-09T06:24:06Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T16:01:06Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bonkdao.net" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-21T15:25:20Z", "first": "2026-10-21T15:25:20Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 1581 }, "security_txt": { "present": true, "found_in": "/security.txt" }, "trackers": { "requests": 1 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 6, "tls": 41, "wait": 59, "connect": 6, "download": 1 }, "response_ms": 113 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 341, "co2_grams": 0, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "108.162.192.144", "host": "sara.ns.cloudflare.com" }, { "ip": "108.162.195.157", "host": "jermaine.ns.cloudflare.com" } ], "zone": "bonkdao.net" }, "location": { "ip": "2a06:98c1:3121::9", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "bonkdao.net" }, "dns": { "A": [ "188.114.96.9", "188.114.97.9" ], "NS": [ "sara.ns.cloudflare.com", "jermaine.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"jermaine.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414342099, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3120::9", "2a06:98c1:3121::9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=63072000; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": "1; mode=block", "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "frame-ancestors http: https:", "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::9", "family": 6 }, "redirects": { "chain": [ "https://bonkdao.net" ] }, "tech_stack": { "technologies": [ "HSTS", "Cloudflare", "HTTP/3" ] }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-07-09T06:24:06Z", "updated": "2026-07-09T06:34:48Z", "expires": "2027-07-09T06:24:06Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "jermaine.ns.cloudflare.com", "sara.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "frame-ancestors http: https:", "x-content-type-options": "nosniff" } } } } ```