# bonkreward-3oh.pages.dev — SUSPICIOUS

> PhishDestroy identifies bonkreward-3oh.pages.dev as an active crypto phishing site mimicking BONK airdrops. 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy has placed bonkreward-3oh.pages.dev under active investigation as a BONK cryptocurrency phishing lure. This Cloudflare Pages domain (registered via Cloudflare, Inc.) resolves to IP 188.114.96.3 and currently carries a Google Trust Services SSL certificate. VirusTotal scanning shows 0 detections out of 95 engines, indicating the site has not yet been widely blacklisted despite likely targeting BONK token holders with fake airdrop claims.

This domain was flagged due to its deceptive naming pattern ‘bonkreward’ closely aligned with the legitimate Solana-based meme token BONK, suggesting an intent to trick users into connecting wallets or entering seed phrases on a spoofed airdrop portal. The site operates from Cloudflare’s infrastructure (IP 188.114.96.3), leveraging Google Trust Services for SSL to appear legitimate. As of now, no public blocklists include this domain, and its low detection rate reflects either its recent emergence or evasion tactics. The lack of prior takedowns increases the risk of successful user compromise.

To mitigate exposure, users should avoid clicking links from unsolicited messages related to BONK or any ‘bonkreward’ domains, verify official channels via bonk.community, and use wallet address allowlists. Organizations are advised to block the IP 188.114.96.3 and domain bonkreward-3oh.pages.dev at the network perimeter and educate teams on recognizing spoofed airdrop campaigns. Always cross-check airdrop eligibility on the project’s official website and never enter private keys or seed phrases into web forms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ae508190-c6b5-4bfd-ac5c-a3f2f0e448b1
- PhishDestroy: https://phishdestroy.io/domain/bonkreward-3oh.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/bonkreward-3oh.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bonkreward-3oh.pages.dev/
Last updated: 2026-03-28