eligible-bonk[.]pw

This domain, eligible-bonk.pw, is identified as a cryptocurrency drainer phishing site designed to steal digital assets from unsuspecting visitors. Cryptocurrency drainers operate by tricking users into connecting their wallets to malicious smart contracts, which then automatically transfer funds to attacker-controlled addresses. The site’s infrastructure and behavior align with known drainer campaigns, where victims are lured through fake airdrops, token giveaways, or deceptive investment opportunities. Once a wallet is connected, the drainer executes unauthorized transactions, often draining the entire balance within seconds. The use of a newly registered domain and low detection rates suggests an attempt to evade security measures and target users before defenses can adapt. Analysis indicates this domain was created on December 16, 2025, and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently used for short-lived phishing infrastructure. VirusTotal reports that 2 out of 95 security vendors flag eligible-bonk.pw as malicious, a low but notable detection rate that reflects its recent emergence and potential evasion tactics. The domain resolves to the IP address 188.114.96.3, which has been associated with other phishing sites in recent months. Additionally, the page title 'Un momento…' suggests the use of a content delivery network or proxy service, a common technique to obscure the true origin of phishing pages and delay takedown efforts. The domain appears on one security blocklist and was proactively blocked by at least one threat intelligence feed, further confirming its malicious intent. If you visited eligible-bonk.pw or interacted with its content, immediate action is required to mitigate potential losses. First, disconnect any wallets that were connected to the site and revoke all permissions granted to unknown or suspicious smart contracts using a blockchain explorer or wallet management tool. Next, transfer any remaining assets to a new, secure wallet that has never been exposed to the phishing site. Monitor all connected accounts for unauthorized transactions and enable transaction alerts where possible. Report the incident to your wallet provider and relevant blockchain security platforms to assist in tracking the attacker’s infrastructure. Finally, scan your device for malware, as some drainer campaigns also deploy infostealers to capture additional sensitive data. Users should remain vigilant for similar scams, particularly those promising free tokens or exclusive investment opportunities.