bonkclaim[.]fun

This domain, bonkclaim.fun, was registered on July 31, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com. The site currently resolves to IP address 104.21.30.35, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. The TLS certificate presented is identified as “WE1”, but no further validation details are available. The page title returned from the live host is “BONK COIN”, indicating an attempt to associate the site with the BONK cryptocurrency. The domain is classified as a crypto scam and specifically as a crypto drainer, a pattern that typically seeks to exfiltrate cryptocurrency assets from unsuspecting victims.

VirusTotal analysis shows that one out of ninety‑three scanning engines flagged the domain, confirming at least a single vendor detection. The domain appears on a single public blocklist and is also listed by PhishDestroy as blocked. Independent reputation scoring from Gridinsoft assigns a trust score of zero out of one hundred, reflecting an extreme lack of confidence in the site’s legitimacy. The overall risk rating has been elevated, and the site’s status is listed as offline at the time of this assessment. While the presence of a Cloudflare front‑end may obscure the true hosting infrastructure, the combination of a low‑trust score, a flagged SSL certificate, and the identification as a crypto drainer provides a strong indication of malicious intent.

However, the limited number of blocklist entries and the single VirusTotal detection leave some uncertainty regarding the full extent of the campaign’s infrastructure and any additional payloads that may have been delivered when the site was active. Defenders should add bonkclaim.fun to network and endpoint blocklists, monitor DNS queries for the domain, and enforce outbound traffic controls that prevent connections to the associated IP address.