claims-monad[.]site

Analysis of the domain claims-monad.site, observed on July 22, 2026, indicates a high‑confidence association with a crypto‑focused brand impersonation campaign targeting the Monad brand. The domain was registered through NameCheap, Inc. on September 21, 2025 and resolves to IP address 195.26.87.173, which is assigned to AS43641 SOLLUTIUM EU Sp z.o.o. in the Netherlands. Hosting is served by nameservers ns1-ams.v-sys.org and ns2-ams.v-sys.org, and the site lacks an SSL certificate, exposing any traffic to plain‑text interception.

The HTTP response returns a page titled "Account Suspended," a generic indicator often used by takedown or placeholder pages rather than a legitimate brand landing page. Trust metrics are extremely low, with Gridinsoft assigning a score of 0/100 and Scamadviser rating the domain at 1/100. Multiple threat‑intelligence feeds have flagged the domain: PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura list it as blocked, and it appears on five additional security blocklists. VirusTotal analysis shows that six of ninety‑five scanning engines flagged the domain for malicious activity, corroborating its suspicious nature.

The reported scam type is a crypto scam, and the domain explicitly impersonates Monad, confirming the brand‑targeted intent. While the page content beyond the title has not been publicly disclosed, the convergence of low trust scores, blocklist inclusion, lack of encryption, and vendor detections provides strong evidence of malicious use. Defenders should continue to block the domain at perimeter controls, monitor DNS queries for the associated IP and nameservers, and advise users to avoid any unsolicited communications referencing Monad that direct to this domain. Ongoing surveillance is recommended to detect any re‑hosting attempts or related infrastructure that may emerge if the actors reactivate the site.