claim-bonkfun[.]app

The domain claim-bonkfun.app is identified as a crypto drainer phishing site, designed to compromise cryptocurrency wallets and drain digital assets. Analysis indicates it specifically targets users of the BONK token, as suggested by the page title 'BONKfun' and the domain naming convention. This domain is currently offline, but its prior activity and infrastructure warrant caution for potential victims or security teams monitoring related threats. Infrastructure analysis reveals the domain was registered on September 12, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 188.114.97.3 and has been flagged by 3 of 95 security vendors on VirusTotal. The domain appears on two security blocklists, including PhishDestroy and ScamSniffer, and holds a Gridinsoft trust score of 0/100. These indicators confirm its malicious classification and association with crypto-draining campaigns. The domain's current offline status does not eliminate the risk posed to users who may have interacted with it prior to takedown. Security teams are advised to monitor for residual connections to the IP 188.114.97.3 or attempts to re-register the domain under alternative TLDs. Users who visited claim-bonkfun.app should immediately revoke any wallet permissions granted during the interaction, transfer remaining assets to a new wallet, and scan their devices for malware. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts.