monad-calculator[.]swishi[.]xyz

The domain monad-calculator.swishi.xyz is associated with a cryptocurrency airdrop scam, specifically targeting users with a phishing kit designed to impersonate brands such as 'across' and 'monad'. Despite being flagged by only 1 out of 95 vendors on VirusTotal, the domain has been included in PhishDestroy's blocklist, highlighting its malicious nature. The site has been taken offline, reducing its immediate threat.

Registered through Go Daddy, LLC and hosted on an Amazon.com, Inc. IP in the United States, the domain was created on October 4, 2025, and detected by PhishDestroy by the end of the same month. The swift detection underscores the effectiveness of PhishDestroy's pipeline, which identifies threats in the critical window before antivirus databases are updated.

The phishing operation used a Let's Encrypt SSL certificate, which is a common tactic to lend legitimacy to fraudulent sites. The platform risk score of 10/100 indicates a relatively low threat level, but the specific targeting of cryptocurrency users through a fake airdrop calculator suggests a sophisticated approach to scamming. The takedown of the site minimizes its potential impact, but the incident serves as a reminder of the evolving tactics in phishing schemes.