claim-monad[.]fun

This domain, claim-monad.fun, was observed hosting a crypto‑scam infrastructure that masquerades as the monad brand. The site was registered on 15 October 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare‑owned address 104.21.47.2, located in the United States under ASN 13335. The SSL certificate presented is identified as WE1, and the HTTP response returns the generic page title “Just a moment…”, a pattern often used by automated challenge services.

Reputation scoring from Gridinsoft assigns a zero‑out‑of‑100 trust rating, and the domain appears on one external blocklist. VirusTotal analysis shows that 11 of 93 scanners flagged the domain, indicating malicious characteristics. PhishDestroy has already added the host to its block list, and the domain’s current status is offline, suggesting the operators have taken it down temporarily.

The elevated risk rating reflects the combination of brand impersonation, cryptocurrency‑related fraud, and low trust scores. Defenders should continue to block the IP address 104.21.47.2 and the domain name at the network perimeter, monitor for any re‑registration or new hostnames pointing to the same Cloudflare edge, and consider sharing the indicator set with threat‑intel platforms. Ongoing observation is advised because the infrastructure could be resurrected under a new domain or by re‑using the same IP range.