dotmonad[.]store

The domain dotmonad.store was registered on November 30, 2025 through the HOSTINGER operations, UAB registrar and is presently taken offline. Security telemetry shows the site appears on a single blocklist and has been flagged by PhishDestroy. VirusTotal analysis recorded 11 detections out of 93 scanning engines, indicating a notable level of malicious classification. The domain resolves to IP address 172.67.205.234, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States.

Gridinsoft assigns a trust score of 0 out of 100, reinforcing the low reputation of the host. The presented SSL certificate is identified as “WE1”, but no further certificate details are available. The page title returned from the live host reads “Monad DNS - Permanent .monad NFT Domains on Monad Blockchain”, suggesting a fabricated offering tied to the monad brand. The threat profile is catalogued as a crypto‑related scam that impersonates the monad brand, aligning with the reported “Crypto Scam” classification.

While the site is no longer reachable, the infrastructure—particularly the Cloudflare‑served IP—remains reusable for future campaigns. Defenders should immediately block dotmonad.store at DNS and proxy layers, add the associated IP to network‑wide deny lists, and monitor for any resurgence of the domain or similar .monad‑related namespaces. Continuous observation of Cloudflare‑origin IP ranges for new domains serving comparable page titles or brand references is advised. Given the limited public content, the exact payload or credential‑harvesting mechanisms remain unknown, but the documented indicators provide sufficient evidence for proactive mitigation.