monadde[.]xyz

The domain monadde.xyz was registered on October 17, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently listed as offline. Infrastructure analysis shows the domain resolves to IP address 205.204.87.49, which belongs to AS10929 eStruxture Data Centers Inc. in Canada. The authoritative nameservers are dns1.regway.com, dns2.regway.com, dns3.regway.com, and dns4.regway.com, indicating the use of a generic registrar‑provided DNS service. No TLS certificate is presented for the site, leaving traffic unencrypted and exposing any potential credential capture to network‑level interception.

The page title returned from the host, "Monad | Data-led summaries & guides," bears no obvious relation to the targeted brand, yet the domain is classified as a brand‑impersonation campaign targeting the brand celer. This classification is corroborated by the presence of the domain on a single security blocklist and by its detection by eight of ninety‑five VirusTotal scanners, reflecting a moderate consensus among malware analysis engines that the host is malicious. Gridinsoft's trust scoring system assigns a value of 0 out of 100, reinforcing the assessment of high risk. PhishDestroy has also blocked the domain, confirming its inclusion in active anti‑phishing feeds.

Although the site is offline, defenders should continue to enforce blocking of the IP range and the associated nameserver set, as threat actors frequently reuse these assets for subsequent campaigns. Monitoring for new domains registered with the same registrar or employing the same hosting provider is advised. Endpoint protection policies should be updated to reject connections to monadde.xyz and any future domains that resolve to the same IP or exhibit the same page title pattern. Network sensors should flag any HTTP requests lacking TLS to this host, and security teams should treat the domain as a confirmed elevated‑risk impersonation vector until further evidence indicates remediation.