z6rds-baaaa-aaaao-a4xnq-cai[.]icp0[.]io

This domain presents a high-risk brand impersonation threat, specifically targeting the Monad blockchain project. The site was designed to trick users into believing they were interacting with an official Monad bridge service, as evidenced by the page title "Monad Bridge - ICP to Monad Autonomous Terminal." Fortunately, the site has been taken offline, but the underlying infrastructure remains a concern for future abuse.

Technical indicators paint a clear picture of malicious intent. VirusTotal flags this domain with 10 out of 95 security vendors marking it as malicious, and Google Safe Browsing lists it as a phishing site. The domain was created on September 06, 2022, and registered through GoDaddy.com, LLC, resolving to IP address 212.71.124.188 with an SSL certificate issued by Let's Encrypt (E7). It appears on at least one security blocklist, and its trust score is effectively zero given the high-risk designation.

Users who may have interacted with this site should take immediate action. Since it impersonates Monad, any credentials, private keys, or funds entered on the page are compromised. Affected individuals should revoke any permissions granted to the site, change passwords, and enable two-factor authentication on all related accounts. Monitor wallet addresses for unauthorized transactions and report the incident to Monad's official security team. PhishDestroy recommends avoiding any bridge services that are not directly linked from the official Monad website.