nyevent-bonk[.]fun

Analysis of nyevent-bonk.fun indicates confirmed phishing infrastructure with elevated risk classification. The domain was registered on December 27, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently offline. Infrastructure analysis reveals Cloudflare hosting (AS13335) with nameservers rustam.ns.cloudflare.com and wren.ns.cloudflare.com, resolving to IP 188.114.97.3 in the United States. No SSL certificate was detected, and the page title 'Um momento...' suggests a temporary holding or redirection page, though the exact phishing content remains unanalyzed.

Detection data shows 7 of 93 security vendors on VirusTotal flagged the domain as malicious, and it appears on one security blocklist (PhishDestroy). AlienVault OTX records the domain in a single threat intelligence pulse, confirming its inclusion in active phishing campaigns. The absence of SSL and the use of Cloudflare nameservers are consistent with common phishing tactics to obscure hosting origins and evade initial scrutiny. Defenders should treat this domain as confirmed malicious infrastructure.

Network-level blocking is recommended, particularly for organizations using PhishDestroy or similar threat feeds. Given the domain's recent registration and Cloudflare hosting, monitoring for re-emergence under similar naming patterns or nameservers is advised. No brand-specific targeting or scam category can be determined from available data, and further forensic analysis would require access to the decommissioned content.