bonkreward-3oh[.]pages[.]dev

PhishDestroy has placed bonkreward-3oh.pages.dev under active investigation as a BONK cryptocurrency phishing lure. This Cloudflare Pages domain (registered via Cloudflare, Inc.) resolves to IP 188.114.96.3 and currently carries a Google Trust Services SSL certificate. VirusTotal scanning shows 0 detections out of 95 engines, indicating the site has not yet been widely blacklisted despite likely targeting BONK token holders with fake airdrop claims.

This domain was flagged due to its deceptive naming pattern ‘bonkreward’ closely aligned with the legitimate Solana-based meme token BONK, suggesting an intent to trick users into connecting wallets or entering seed phrases on a spoofed airdrop portal. The site operates from Cloudflare’s infrastructure (IP 188.114.96.3), leveraging Google Trust Services for SSL to appear legitimate. As of now, no public blocklists include this domain, and its low detection rate reflects either its recent emergence or evasion tactics. The lack of prior takedowns increases the risk of successful user compromise.

To mitigate exposure, users should avoid clicking links from unsolicited messages related to BONK or any ‘bonkreward’ domains, verify official channels via bonk.community, and use wallet address allowlists. Organizations are advised to block the IP 188.114.96.3 and domain bonkreward-3oh.pages.dev at the network perimeter and educate teams on recognizing spoofed airdrop campaigns. Always cross-check airdrop eligibility on the project’s official website and never enter private keys or seed phrases into web forms.