monetary[.]coin999[.]vip

Analysis of monetary.coin999.vip as of July 28, 2026 shows the domain is active and linked to a generic phishing operation. The domain resolves to the IPv4 address 188.114.97.3, and authoritative name server data could not be retrieved (NS_NOT_FOUND). It appears on one security blocklist and is explicitly blocked by the PhishDestroy mitigation service, indicating that at least one trusted sinkhole has identified it as malicious.

VirusTotal has examined the domain, with 18 of 91 scanning engines returning a malicious verdict, providing multi‑engine corroboration of phishing behavior. The supplied intelligence does not include registrar information, SSL certificate details, HTTP status codes, or additional hosting metadata, leaving the broader infrastructure context partially unknown. The risk level assigned to the domain is high, reinforcing the recommendation to treat any traffic to the domain as unsafe.

Defenders should ensure that network perimeter controls, DNS filtering, and endpoint protection solutions block monetary.coin999.vip and its resolved IP 188.114.97.3. Continuous monitoring for related indicators, such as connections to the same IP address or repeated blocklist entries, is advised. Periodic rescanning with multi‑engine services will help capture any changes in detection rates, and any new intelligence should be incorporated into existing security policies to maintain a high‑assurance posture against this threat.