bonk-promo[.]icu

Analysis as of July 24, 2026 indicates that the domain bonk-promo.icu was registered on September 15, 2025 through Web Commerce Communications Limited. The domain resolves to 104.21.80.1, an address owned by Cloudflare, Inc. (AS13335) and is served by the Cloudflare nameservers dane.ns.cloudflare.com and nena.ns.cloudflare.com. No TLS certificate was observed, suggesting the site was delivered over HTTP only. The landing page returned the title “Nur einen Moment…”, which is the only content currently indexed; no additional page content has been captured.

The domain is listed on a single public blocklist and is actively blocked by the PhishDestroy service. Gridinsoft assigned a trust score of 0 out of 100. VirusTotal scans record two detections out of ninety‑five submitted scanners. The site has been taken offline, and its current HTTP status is unavailable.

The evidence points to a short‑lived infrastructure typical of generic phishing campaigns, but the exact target brand or credential‑stealing kit cannot be confirmed from the available data. Defenders should continue to block the domain at network perimeters, monitor for any resurgence of the same IP or nameserver pair, and add the indicator to internal threat‑intel feeds. Because the site lacks SSL and is already offline, the immediate risk to end users is reduced, yet the registration pattern and low trust score suggest the operator may reuse the domain or similar aliases in future campaigns. Ongoing surveillance of the registrar and Cloudflare IP range is recommended.