get[.]mon-l1[.]com

The domain get.mon-l1.com is an active brand impersonation phishing site that targeted Twitch users, posing as a legitimate link service under the title 'Bio.links - Seus links em um só lugar'. As of the latest assessment, the site has been taken offline, but it posed an elevated risk due to its impersonation of Twitch, a popular streaming platform, with no drainer kit detected. This domain is confirmed as a scam through multiple security checks, making it unsafe for users who may have encountered it.

Technical indicators for get.mon-l1.com include detection by 2 of 95 VirusTotal vendors, specifically ChainPatrol and SOCRadar, and it appears on 1 security blocklist (PhishDestroy). The domain was registered through Tucows Domains Inc. on October 16, 2025, and resolves to IP address 188.114.96.3, located in the US under AS13335 Cloudflare, Inc. Google Safe Browsing did not flag the domain, but the Gridinsoft trust score is 0/100, and no SSL certificate was issued. The nameservers are kyrie.ns.cloudflare.com and may.ns.cloudflare.com.

For users who interacted with get.mon-l1.com, especially by entering credentials, immediate safety steps are recommended. Since this is a credential phishing scam impersonating Twitch, change any passwords used on the site and enable two-factor authentication on your Twitch account. Monitor for unauthorized access or fraudulent activity, and report the domain to PhishDestroy or other security services. If you suspect data theft, consider contacting your bank or identity protection services. No crypto drainer was involved, so no token revocation is needed.