bonkbot[.]info

The domain bonkbot.info is a phishing site engaged in brand impersonation targeting Solana users. It presents itself as a cryptocurrency trading tool under the name 'Bonkbot: Simplify Your Solana Trading' but is designed to deceive victims into disclosing sensitive information or transferring funds. No drainer kit was identified, though the scam type is cryptocurrency-related. The site is currently taken offline, reducing immediate risk but not eliminating potential follow-up threats.

Technical indicators confirm bonkbot.info as a malicious domain. It was flagged by 1 of 95 VirusTotal security vendors, specifically Gridinsoft, and appears on 1 security blocklist (PhishDestroy). The domain was registered through NameCheap, Inc. on February 21, 2026, and resolves to the IP address 104.21.51.38, hosted on Cloudflare's network (AS13335) in the US. The SSL certificate is issued by Google Trust Services (WE1), and the site's nameservers are donovan.ns.cloudflare.com and dayana.ns.cloudflare.com. Google Safe Browsing has not flagged the domain, but the HTTP status 521 indicates it is currently inaccessible.

Users who interacted with bonkbot.info should take immediate safety steps. If cryptocurrency transactions were attempted, revoke any token approvals and transfer remaining funds to a new wallet. Monitor accounts for unauthorized activity and enable two-factor authentication (2FA) on all related services. Report the domain to platforms like PhishTank, Google Safe Browsing, or local cybercrime authorities to aid in broader mitigation efforts. Victims should also change passwords for any accounts accessed while the site was active.