monad-live[.]app

This report details the technical threat posed by the domain monad-live.app. The site is an impersonation scam targeting the Monad brand. The page title, "Index of /", indicates a directory listing rather than a functional website, suggesting the domain was prepared for malicious use or was a placeholder. The primary threat is brand impersonation, designed to deceive users into believing they are interacting with an official Monad resource, likely to harvest credentials or distribute malware.

Technical evidence confirms the malicious nature of the site. VirusTotal analysis shows 8 out of 95 security vendors flagged the domain as malicious. The domain is registered with VSYS-AMS (ASN: 43641) and hosted on IP address 213.111.144.132 in the Netherlands, under AS43641 SOLLUTIUM EU Sp z.o.o. The domain uses nameservers ns1-ams.v-sys.org and ns2-ams.v-sys.org. No SSL certificate was detected, and the GridinSoft trust rating is 0 out of 100. The domain appears on 2 blocklists and was flagged by CRDF, CyRadar, Fortinet, Google Safebrowsing, and Gridinsoft.

The current status of monad-live.app is DOWN/OFFLINE, indicating it is not actively serving content. The risk level is high for users who may have interacted with the site while it was active, due to the impersonation of a known brand and the lack of security measures. The offline status reduces immediate risk, but the domain could be reactivated.