mollyonmonad[.]xyz

The domain mollyonmonad.xyz was registered on May 14, 2026 through Go Daddy, LLC. It resolves to the IPv4 address 216.150.1.1, which is associated with Vercel, Inc. in the United States. The site serves content over HTTPS using a Let’s Encrypt R12 certificate, and an HTTP GET returns a 200 status code. The page title observed is “MOLLY · Wife of Molandak · Monad”, which does not correspond to any known legitimate brand or service. Threat intelligence flags the domain as high‑risk. The Gridinsoft trust score is 0 out of 100, indicating a complete lack of reputation. The domain appears on three independent security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis shows that one out of ninety‑five scanned security vendors flagged the domain, providing an additional indicator of malicious intent. Despite these signals, the detection surface remains limited. Only a single security vendor has raised a detection, and no malware payloads have been publicly disclosed. The site currently returns a valid page with a generic title, and no obvious credential‑stealing forms have been captured in the available snapshots. Consequently, the exact phishing campaign vector and targeted brand remain uncertain. Defenders should treat mollyonmonad.xyz as a malicious infrastructure component. Immediate actions include adding the domain and its resolved IP address to network deny lists, monitoring DNS queries for the domain, and instrumenting web proxy logs for HTTP 200 responses from the IP. Continuous re‑assessment is advised, as additional detections may emerge if the campaign expands.