eligible-bonk[.]net

The domain eligible-bonk.net has been identified as a generic phishing threat by PhishDestroy, with a risk level of elevated and current status offline. This domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and created on December 17, 2025. It resolves to IP address 2606:4700:3031::6815:5bb2 and uses an SSL certificate from Google Trust Services (WE1). The page title was "Just a moment...", a common placeholder used in phishing kits.

According to VirusTotal, only 2 out of 95 security vendors flagged this domain as malicious, indicating low detection rates among antivirus engines. The domain appears on 3 security blocklists, which is a moderate indicator of malicious activity. The SSL certificate and hosting infrastructure suggest the site may have been set up to impersonate a legitimate service or deploy a crypto drainer, though no specific brand was named in the intelligence.

As the domain is now offline, immediate risk is reduced, but users should remain vigilant. PhishDestroy recommends avoiding any interaction with this domain and verifying unknown links through their platform. If you have already visited the site, change your passwords and enable two-factor authentication on all accounts. Report any suspicious activity to your security team or local authorities.