propose-bonks[.]net

The domain propose-bonks.net has been identified as a crypto drainer phishing site, specifically targeting users with fraudulent cryptocurrency reward proposals under the guise of Bonk rewards. The domain is currently offline, but prior activity indicates an intent to deceive victims into connecting wallets to malicious smart contracts, resulting in unauthorized fund transfers. Analysis of the domain reveals it was registered through NameSilo, LLC on July 12, 2025, and resolved to the IP address 172.67.154.33. Security vendors flagged the domain in 2 of 95 VirusTotal scans, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and was blocked by PhishDestroy. The page title, Bonk Rewards Proposal, aligns with tactics used to impersonate legitimate cryptocurrency reward programs, a common vector for crypto drainer attacks. Infrastructure analysis indicates the domain leveraged cloud-based hosting, likely to evade detection and maintain anonymity. Given the elevated risk posed by crypto drainer schemes, organizations and individuals are advised to block the domain at the DNS level, revoke any wallet permissions associated with it, and monitor for unauthorized transactions. Users who interacted with the domain should assume credential compromise and rotate any exposed cryptographic keys or passwords. Security teams should treat this domain as a high-priority indicator of compromise and integrate it into threat intelligence feeds for proactive defense.