eligible-bonkcoin[.]live

The domain eligible-bonkcoin.live is an active generic phishing site designed to deceive users into disclosing sensitive information or performing actions that compromise their security. It does not impersonate a specific brand or employ a known drainer kit, but its purpose remains malicious, targeting victims through broad phishing tactics. As of the latest verification, the site remains operational, posing an elevated risk to visitors.

Technical analysis reveals that eligible-bonkcoin.live is flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, CRDF, and Gridinsoft. The domain was created on February 21, 2026, and resolves to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335) in the US. It appears on three security blocklists: PhishDestroy, MetaMask, and SEAL. No SSL certificate is present, and the observed page title is 'Nur einen Moment…'. Nameservers are garrett.ns.cloudflare.com and grannbo.ns.cloudflare.com.

Users who may have interacted with eligible-bonkcoin.live should immediately change any exposed credentials, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized access or fraudulent activity. If financial or cryptocurrency details were entered, revoke any token approvals and consider transferring funds to a new wallet. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts.