bondage-coin[.]fun

Analysis as of July 19, 2026 indicates that the domain bondage-coin.fun is currently active and serving HTTP 200 responses. The site presents the page title "$BONDAGE – Bondage Coin," suggesting a cryptocurrency‑related lure. Registration was performed through GoDaddy.com, LLC, and the domain is delegated to Cloudflare nameservers carla.ns.cloudflare.com and derek.ns.cloudflare.com, resolving to IP address 104.21.69.104, which is associated with Cloudflare, Inc. in Canada. The TLS certificate is issued by Google Trust Services under the WE1 hierarchy, confirming a valid HTTPS endpoint. Threat intelligence sources have placed the domain on three security blocklists, and it is explicitly blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans show five of ninety‑one vendors flagging the domain, reinforcing the malicious assessment. The risk level is classified as high and the unique seed f0821d ties this observation to existing tracking. No direct content analysis is available beyond the title, so the exact phishing mechanics remain unverified. Defenders should prioritize immediate DNS and URL filtering for bondage-coin.fun, enforce TLS inspection to capture any credential‑stealing traffic, and monitor related Cloudflare IP ranges for similar activity. Continuous re‑evaluation is advised as additional payload or page content becomes observable.