claims-monads[.]xyz

This domain, claims-monads.xyz, is assessed as a high-risk brand impersonation site targeting Monad, a known entity in the cryptocurrency space. Infrastructure analysis reveals the domain was registered on October 14, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with fraudulent domains. The domain resolved to IP 104.21.7.55, hosted on Cloudflare's network (AS13335), a common tactic to obscure hosting origins and evade takedowns. No SSL certificate was present, increasing the likelihood of unencrypted data transmission and further signaling low legitimacy.

Nameservers clint.ns.cloudflare.com and gail.ns.cloudflare.com were used, consistent with Cloudflare-protected domains. The page title, 'Monad Claim Portal,' directly aligns with the scam type classified as a crypto scam, indicating an attempt to deceive users into interacting with fraudulent cryptocurrency claims or distributions. Google Safe Browsing flags the domain for social engineering, a classification that typically involves deceptive practices to manipulate users into divulging sensitive information or performing actions like transferring funds. The domain appears on at least one security blocklist and is blocked by PhishDestroy, a specialized anti-phishing service.

Gridinsoft assigns a trust score of 0/100, reflecting a complete lack of credibility based on their detection heuristics. As of July 23, 2026, the domain is offline, which may indicate a takedown or voluntary suspension by the threat actor. However, defenders should not assume permanent inactivity, as domains can be reactivated or repurposed. Thirteen of 95 security vendors on VirusTotal flagged the domain as malicious, providing additional corroboration of its fraudulent nature.