letmebonk[.]xyz

This domain, letmebonk.xyz, is identified as a brand impersonation threat targeting Celer, a cross-chain interoperability protocol. Analysis of the page title, "Global Financial Infrastructure for Everyone | Solana," suggests an attempt to deceive users into believing the site is affiliated with legitimate blockchain infrastructure, likely to facilitate cryptocurrency theft or credential harvesting. The domain mimics Celer’s branding to exploit trust in the platform, potentially deploying a crypto drainer to siphon assets from unsuspecting victims.

Technical indicators confirm the malicious nature of this domain. VirusTotal reports that 1 out of 95 security vendors flagged letmebonk.xyz as malicious, while Gridinsoft assigns it a trust score of 0/100. The domain was registered on November 25, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with phishing and fraudulent domains. It resolves to the IP address 76.76.21.21 and currently appears on one security blocklist. The SSL certificate is issued by Google Trust Services, which, while not inherently malicious, is often leveraged by threat actors to lend a false sense of legitimacy to phishing sites.

Users who visited letmebonk.xyz should take immediate action to mitigate potential risks. If any interactions occurred, such as connecting a wallet or entering credentials, affected accounts should be considered compromised. Users are advised to revoke any active wallet connections to the domain via their wallet’s connected sites interface and monitor their accounts for unauthorized transactions. Additionally, running a full scan of the device used to access the site is recommended to detect any secondary infections. Given the domain’s offline status, users should remain vigilant for similar phishing attempts targeting Celer or other blockchain platforms.