monadpad[.]live

The domain monadpad.live was observed hosting a brand‑impersonation page that mimics the Monad brand, as indicated by the page title "Monad CTO | Launchpad". The site resolves to the IP address 216.198.79.1, which is hosted in the United States under ASN AS16509 owned by Amazon.com, Inc. No SSL certificate was presented, meaning traffic to the site was unencrypted. The domain is served by the authoritative nameservers launch1.spaceship.net and launch2.spaceship.net. Infrastructure analysis shows the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service.

Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent. VirusTotal scans reported that eight of ninety‑five security vendors flagged the domain, reinforcing the suspicion of abuse. The current operational status is offline, indicating that the malicious content has been taken down or the hosting has been terminated. Defenders should continue to monitor the associated IP address for any re‑use, enforce outbound filtering to block connections to the domain and its IP, and update internal blocklists to include monadpad.live.

Because the site is already offline, immediate containment actions are limited to ensuring that any cached artifacts or URLs are purged from security tools. Further investigation should focus on confirming whether the domain was used in phishing campaigns targeting Monad employees or customers, and on correlating any observed credential‑theft incidents with the eight vendor detections. Continuous threat‑intel feeds should be consulted for any re‑appearance of the domain or related infrastructure.