bonkeverything[.]fun

Analysis as of July 25 2026 indicates that the domain bonkeverything.fun was registered on September 23 2025 through Go Daddy, LLC. DNS resolution points to the Amazon Web Services address 216.198.79.1, which belongs to ASN 16509 (Amazon.com, Inc.) and is served by Vercel's DNS infrastructure (ns1.vercel-dns.com, ns2.vercel-dns.com). The site presents an HTTPS certificate issued by Let’s Encrypt (R12) and enforces HSTS, suggesting a legitimate TLS configuration despite its malicious purpose. The only observed HTTP response is a 404 status, and the page title returned is “$EVERYTHING - More Than a Meme, It’s a Mindset”, which does not disclose any brand or login interface but aligns with the classified scam type of banking phishing. VirusTotal records show that 2 of 95 scanned security vendors flagged the domain, providing limited but corroborating detection.

The domain is listed on a single external blocklist and has been explicitly blocked by the PhishDestroy service. AlienVault OTX references the domain in one threat‑intelligence pulse, further confirming its association with malicious activity. No additional public reputation scores are available. The evidence collectively points to a low‑profile banking‑phishing campaign that leverages a generic meme‑oriented title to lure victims, hosted on reputable cloud infrastructure to evade simple IP‑based blocking.

Because the domain is currently taken offline, active exploitation cannot be confirmed, but the presence of security‑vendor detections, blocklist entries, and OTX pulse suggests that the infrastructure may be reused. Defenders should continue to monitor DNS queries for the 216.198.79.1 address and the specific domain name, enforce outbound traffic controls to block connections to this host, and add both the domain and its IP to internal blocklists.