mollyonmonad.xyz
“MOLLY · Wife of Molandak · Monad”
Evidence Summary
The domain mollyonmonad.xyz was registered on May 14, 2026 through Go Daddy, LLC. It resolves to the IPv4 address 216.150.1.1, which is associated with Vercel, Inc. in the United States. The site serves content over HTTPS using a Let’s Encrypt R12 certificate, and an HTTP GET returns a 200 status code. The page title observed is “MOLLY · Wife of Molandak · Monad”, which does not correspond to any known legitimate brand or service. Threat intelligence flags the domain as high‑risk. The Gridinsoft trust score is 0 out of 100, indicating a complete lack of reputation. The domain appears on three independent security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis shows that one out of ninety‑five scanned security vendors flagged the domain, providing an additional indicator of malicious intent. Despite these signals, the detection surface remains limited. Only a single security vendor has raised a detection, and no malware payloads have been publicly disclosed. The site currently returns a valid page with a generic title, and no obvious credential‑stealing forms have been captured in the available snapshots. Consequently, the exact phishing campaign vector and targeted brand remain uncertain. Defenders should treat mollyonmonad.xyz as a malicious infrastructure component. Immediate actions include adding the domain and its resolved IP address to network deny lists, monitoring DNS queries for the domain, and instrumenting web proxy logs for HTTP 200 responses from the IP. Continuous re‑assessment is advised, as additional detections may emerge if the campaign expands.
Threat Response Pipeline
Public Blocklist Status
Blocklist coverage
11 monitored external feeds · stored snapshot Sep 9, 2026
9 monitored external feeds No match
Stored detection
Cloaking alert
- Cloaking type
content_split- Cloaking score
- 1/6
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive