bonk-hub[.]fun

The domain bonk-hub.fun is currently classified as a high‑risk generic phishing site and remains active as of 13 July 2026. Infrastructure analysis shows the domain is hosted behind Cloudflare (IP 188.114.97.3, located in Canada) and uses the Cloudflare name servers elijah.ns.cloudflare.com and elaine.ns.cloudflare.com. The SSL certificate is issued by Let’s Encrypt (E7), indicating a valid TLS endpoint despite the malicious intent. Registration data reveals the domain was created on 24 March 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. Reputation signals are poor: Gridinsoft assigns a trust score of 0/100, the domain appears on one security blocklist, and it is listed in eight AlienVault OTX pulses. PhishDestroy has also blocked the domain. VirusTotal analysis reports a single detection out of 94 scanners, confirming that at least one security vendor has flagged the site. An HTTP request returns a 403 status, and the only observed page title is "Just a moment...", suggesting that the landing page content has not been publicly disclosed. Because the exact phishing payload or credential‑harvesting mechanisms are unknown, defenders should treat the domain as malicious. Recommended actions include adding bonk-hub.fun to network deny lists, configuring DNS‑level blocking, and monitoring for any related C2 activity. Users should be warned to avoid any links to this domain and to report suspicious communications that reference it.