donked[.]cc

This domain poses a high risk as a brand impersonation threat, specifically targeting Base with a fake crypto casino called Donked. The site was designed to deceive users into believing it was a legitimate blockchain-based gambling platform, but it was actually a malicious attempt to steal funds or credentials.

PhishDestroy identified donked.cc through multiple indicators: it resolves to IP 172.67.142.97, was registered on May 18, 2026 via NICENIC INTERNATIONAL GROUP CO., LIMITED, and has an SSL certificate from Google Trust Services (WE1). VirusTotal flagged it with 12 out of 95 security vendors marking it as malicious, and it appears on 3 security blocklists. AlienVault OTX also reported it in one threat intelligence pulse. The site is now offline, but the domain remains a risk.

Users should avoid visiting donked.cc or any related links. If you have already interacted with the site, change your passwords immediately and monitor your accounts for unauthorized transactions. Report any suspicious activity to relevant authorities and consider using a trusted security solution to scan your devices.