staging[.]consensys-lootbox[.]mondorobot[.]com

The domain staging.consensys-lootbox.mondorobot.com is associated with a generic phishing operation and has a high threat score of 85/100. The site is currently down, indicating it has likely been taken down following detection efforts. No security vendors have flagged this domain as malicious, with a VirusTotal detection count of 0 out of 95. However, it is listed on 3 public blocklists, which suggests prior recognition as a threat, despite Google Safe Browsing not flagging it.

Registrar information is not available, indicating potential use of privacy protection or that it has been scrubbed. The hosting IP is 2620:1ec:48:1::45, with the domain created on 2026-02-21 and first seen on 2026-02-26. Block the domain at the perimeter and flag the IP as an IOC for further monitoring.