bonus-monad[.]com

The domain bonus-monad.com was registered on 4 December 2025 through NiceNIC International Group Co., Limited and is currently hosted behind Cloudflare’s network (AS13335). DNS resolution points to the address 188.114.96.3, and the authoritative name servers are emerie.ns.cloudflare.com and valentin.ns.cloudflare.com. No TLS certificate is presented, indicating that the site serves only plain HTTP. The only visible page title returned by the server is “Nur einen Moment…”, a German phrase meaning “Just a moment…”, which does not reference the targeted brand.

The site is flagged by the Gridinsoft trust engine with a score of 0 out of 100, the lowest possible rating, and it has been listed on a single security blocklist. PhishDestroy has actively blocked the domain, and VirusTotal reports that six of ninety‑five scanning engines identified malicious characteristics. The domain is marked as offline at the time of analysis, but its infrastructure remains observable and could be re‑activated.

The primary threat vector is brand impersonation of the legitimate Monad brand, as indicated by the intelligence label. Defenders should add bonus‑monad.com to URL filtering and DNS sink‑hole policies, monitor for any future resolution changes, and consider extending blocklists to include the associated Cloudflare IP range if not already covered. Continuous re‑scanning with multi‑engine services is advised to capture any new payloads or redirects that may appear if the site is restored.