snapshots-bonk[.]com

Analysis of snapshots-bonk.com shows a short‑lived infrastructure used for generic phishing. The domain was registered through NameSilo, LLC on August 06, 2025 and resolves to the IP address 172.67.149.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presented the page title "Nur einen Moment…" before being taken offline, and its SSL certificate is identified only as WE1, offering no additional trust signals. Defensive telemetry indicates the domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy.

Gridinsoft assigned a trust score of 0 out of 100, reflecting a highly suspicious reputation. VirusTotal analysis recorded a single positive detection out of 93 scanning engines, confirming that at least one security vendor flagged the domain as malicious. No further public threat‑intel sources such as OTX or Safe Browsing entries are presently linked to the domain, and the content of the landing page has not been publicly disclosed beyond the title.

Given the combination of a low trust score, blocklist presence, a positive vendor flag, and the fact that the domain is already offline, defenders should add snapshots-bonk.com and its resolving IP 172.67.149.3 to deny‑list rules across perimeter and endpoint controls. Continuous monitoring of Cloudflare‑hosted IP ranges for similar short‑lived domains is advisable, as is periodic re‑query of VirusTotal and other multi‑engine scanners to capture any re‑activations. Incident response teams should also verify that any emails or URLs observed in the wild referencing this domain are quarantined, and that users are reminded not to click links that redirect to domains with the same page title or similar linguistic cues.