bonkcoin[.]ltd

Analysis of bonkcoin.ltd shows the domain was registered on February 21, 2026 and is currently taken offline. DNS resolution points to a single address, 104.21.94.143, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. The site presented the page title "Nur einen Moment…" but no additional content details are available.

Security scoring systems indicate extreme risk: Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on one known blocklist, PhishDestroy, which has already blocked it. VirusTotal scans report that 2 of 93 antivirus and URL‑reputation vendors flagged the domain, confirming malicious intent. The SSL certificate is labeled WE1, but no further certificate attributes have been disclosed.

Existing evidence confirms the domain is being used for a generic phishing campaign, though the specific lures or credential‑ harvesting mechanisms remain unknown. Defenders should continue to block the IP address 104.21.94.143 at perimeter firewalls and proxy devices, ensure DNS filtering rules include the domain, and monitor for any re‑hosting of the payload on other Cloudflare‑provided IP ranges. Because the site is offline, real‑time traffic may already be reduced, yet the relatively recent creation date suggests a short‑lived operation that could reappear under a different name; continuous threat‑intel feeds and automated URL‑reputation services are recommended to catch any recurrence.