m0nad-clalm[.]com
“Monad Claim Portal”
Résumé des preuves
The domain m0nad-clalm.com was registered on October 19, 2025 through NiceNIC International Group Co., Limited. Its authoritative nameservers are aryanna.ns.cloudflare.com and malcolm.ns.cloudflare.com, directing traffic to the Cloudflare edge at IP 104.21.52.192, which belongs to ASN 13335 (Cloudflare, Inc.) located in the United States. No TLS certificate is presented, indicating the site is served without HTTPS encryption. Public analysis shows the site presents a page titled “Monad Claim Portal” and is classified as a wallet/seed phishing campaign targeting the “monad” brand.
VirusTotal reports 14 of 95 scanning engines flag the domain as malicious, and the domain appears on at least one security blocklist, specifically PhishDestroy. Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. The current status is reported as taken offline, but the underlying Cloudflare edge remains reachable. Defenders should add the domain to DNS blacklists, update web‑proxy and firewall rules to drop any HTTP requests to the host, and monitor outbound traffic for attempts to resolve the domain.
Because the site lacks TLS, any attempted connections will be visible in network captures, allowing further attribution. Continuous monitoring of the associated Cloudflare IP range and the registrar NiceNIC for new registrations that resemble the same naming pattern is also recommended. No additional content such as login forms or scripts has been publicly disclosed, so the exact mechanics of the seed harvesting remain unknown. Given the multiple vendor detections, blocklist listing, and the explicit “Monad Claim Portal” title, the domain should be treated as high‑confidence malicious infrastructure aimed at harvesting cryptocurrency wallet seeds from victims who believe they are interacting with a legitimate monad service.
Data Coverage
Renseignements sur la sécurité réseau
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 13/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse forensique
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif