bonkgo[.]icu

This domain, bonkgo.icu, is assessed as a high-risk generic phishing site based on multiple security indicators. Registered on July 20, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, it was reported as active on July 22, 2026, and remains operational at the time of analysis. The domain resolves to IP address 188.114.96.3 and uses Cloudflare nameservers (patrick.ns.cloudflare.com and suzanne.ns.cloudflare.com), which is consistent with a hosting environment that can obscure the true origin. It is blocked by three independent security blocklists and by PhishDestroy, MetaMask, and SEAL—a strong signal that the domain is flagged for malicious intent by multiple threat intelligence sources.

VirusTotal scanning by 95 vendors returned zero detections at the time of report; however, the absence of detections does not indicate safety, as phishing domains often evade initial detection or are not yet widely recognized by automated scanners. The exact content of the site has not been analyzed, and no specific brand or scam category has been identified from the available intelligence, so it is classified as a generic phishing domain. Defenders should treat this domain as compromised and actively hostile.

Recommended actions include blocking the domain at the DNS, proxy, and email gateway levels; monitoring for any outbound connections to 188.114.96.3; and adding the domain to internal threat intelligence feeds. Because the site is still active, users who may have visited it should be alerted and their credentials checked for unauthorized access. Continuous monitoring is advised, as the domain may later pivot to hosting more specific lures or be re-registered under different nameservers.