The domain monetrix.community was registered on June 22, 2026 through Dynadot Inc and is currently active. DNS resolution points to the IPv4 address 188.114.97.3 and the authoritative name servers are clint.ns.cloudflare.com and nina.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. The domain appears on three public security blocklists and has been explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services, suggesting that multiple anti‑phishing platforms have observed malicious activity associated with this host.
VirusTotal analysis shows that 2 of 91 AV engines flagged the domain, confirming that at least a subset of scanners consider it suspicious. No additional forensic details such as SSL certificate properties, HTTP response codes, or page titles have been provided, so the exact content and phishing vector remain unknown. The combination of recent registration, Cloudflare name servers, and early detection by blocklist providers points to a short‑lived, opportunistic phishing campaign that may be targeting users of cryptocurrency wallets or other financial services.
Defenders should immediately add monetrix.community to outbound‑allow lists, enforce DNS sink‑hole rules, and ensure that email gateways block URLs that resolve to the associated IP address. Continuous monitoring of DNS queries for this domain and correlation with any credential‑theft alerts will help surface ongoing attempts. Where possible, update intrusion‑detection signatures to match the observed IP and name‑server pair, and consider sharing the indicator set with threat‑intel sharing platforms to aid broader community protection.