bonkfun[.]net

Analysis of bonkfun.net indicates this domain was actively flagged as a cryptocurrency phishing site prior to being taken offline on July 24, 2026. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain used four nameservers—dns1.regway.com, dns2.regway.com, dns3.regway.com, and dns4.regway.com—hosted under Regway, a provider commonly linked to abusive registrations. At the time of assessment, the domain returned an HTTP 200 status, suggesting an active phishing page was served before its removal.

Security vendor detections confirm elevated risk: three of 93 engines on VirusTotal flagged bonkfun.net as malicious, though the specific payload or phishing kit remains unconfirmed. The domain appears on two security blocklists and is explicitly blocked by PhishDestroy and ScamSniffer, both of which specialize in cryptocurrency fraud detection. The page title, 'bonkfun.net,' offers no clear brand impersonation, though the threat type—generic phishing—aligns with common cryptocurrency scam patterns targeting wallet credentials or token transfers. Defenders should treat this domain as compromised infrastructure.

While the site is currently offline, the registration and hosting patterns suggest potential reuse or rebranding. Network-level blocking of the domain and associated nameservers is recommended, alongside monitoring for new registrations under the same registrar or nameserver set. No SSL certificate details or hosting IP were provided, limiting further infrastructure attribution. The absence of additional context—such as targeted brands or phishing kit fingerprints—means defenders should rely on existing blocklist integrations rather than assuming brand-specific impersonation.