bonk[.]claims

This domain, bonk.claims, was identified as a crypto drainer threat, specifically designed to impersonate the legitimate Bonk.fun platform. The site likely deployed malicious scripts to trick users into connecting their cryptocurrency wallets and approving fraudulent transactions, resulting in the theft of digital assets. The domain was actively used for phishing before being taken offline.

Evidence supporting this assessment includes a VirusTotal detection rate of 16 out of 95 security vendors flagging the domain as malicious. The domain was registered on February 22, 2026, through NiceNIC International Group Co., Limited, a registrar often associated with high-risk domains. Infrastructure analysis reveals the site resolved to IP address 45.74.47.68 and utilized technologies such as Plesk, PHP, Vue.js, and Nginx, with an SSL certificate issued by Let's Encrypt. The domain appears on 2 security blocklists and was blocked by PhishDestroy and Enkrypt. Scamadviser assigned a trust score of 27/100, while Gridinsoft rated it 0/100, both indicating high risk.

Users who visited bonk.claims should immediately revoke any permissions granted to the site for their cryptocurrency wallets. They should check wallet activity for unauthorized transactions and transfer remaining assets to a new, secure wallet. Additionally, running a full security scan on their device and monitoring accounts for suspicious activity is recommended. The domain is currently offline, but similar threats may emerge, so caution with unsolicited crypto-related domains is advised.