collect-bonk[.]com

PhishDestroy identifies collect-bonk.com as an active crypto scam domain posing as a BONK token collector to trick users into connecting wallets and signing malicious transactions. The site masquerades as a legitimate platform to claim or collect fake BONK tokens, a Solana-based meme coin, but is designed solely to deceive victims into authorizing cryptocurrency theft. Security researchers warn that such domains often lead to unauthorized token transfers, wallet draining, or credential harvesting under the guise of token rewards. This domain was flagged during routine threat intelligence analysis using seed 8282a8.

This domain was registered through Squarespace Domains LLC on May 11, 2026, a recent creation that raises immediate suspicion. It resolves to IP address 188.114.97.3 and uses a Let's Encrypt SSL certificate, which is commonly exploited by threat actors to appear legitimate. Critically, VirusTotal currently reports 0 detections out of 95 antivirus engines, indicating it has not yet been widely blacklisted despite active malicious activity. The lack of detection underscores the importance of proactive domain reputation monitoring and user vigilance.

If you visited collect-bonk.com, do not connect your wallet or enter any credentials. Disconnect from the site immediately and revoke any permissions granted. Use a reputable blockchain explorer or wallet interface to check for unauthorized token transfers or transaction approvals. Report the domain to your security team or platform provider. Consider using a hardware wallet or transaction simulation tools to prevent future exposure. Monitor your wallet and bank accounts closely for suspicious activity. Share this intelligence with others to prevent further victimization.