bonkrewards[.]co

The domain bonkrewards.co has been identified as a cryptocurrency phishing site targeting users with fraudulent reward schemes under the guise of 'Bonk Rewards.' Analysis confirms this domain is currently offline, though it previously operated as an active phishing infrastructure. The page title explicitly used 'Bonk Rewards,' suggesting an attempt to impersonate or exploit the Bonk cryptocurrency brand to deceive victims into disclosing sensitive credentials or transferring digital assets. Infrastructure analysis reveals the domain was registered on August 22, 2025, through GoDaddy.com, LLC and resolved to the IP address 188.114.97.3. Security assessments indicate the domain was flagged by 13 of 95 vendors on VirusTotal, while appearing on two distinct security blocklists. The SSL certificate is issued by Google Trust Services, and the site employed Cloudflare with HTTP/3 support, including Cloudflare Browser Insights for monitoring. AlienVault OTX recorded the domain in one threat intelligence pulse, further corroborating its malicious classification. The combination of recent registration, cryptocurrency-themed deception, and multi-source flagging underscores the elevated risk posed by this infrastructure. As of the latest verification, bonkrewards.co has been taken offline, though residual risk remains for users who may have interacted with the domain prior to its deactivation. Organizations and individuals are advised to block the domain and associated IP address (188.114.97.3) at the network level. Security teams should review logs for connections to this infrastructure and monitor for related phishing campaigns impersonating cryptocurrency reward programs. End-users who engaged with the site should assume credential compromise and revoke any active sessions or authorizations tied to cryptocurrency wallets or exchanges. Proactive threat hunting for similar domains registered through the same registrar or resolving to the identified IP range is recommended to mitigate further exposure.