monacoin[.]xyz

This domain, monacoin.xyz, is a brand impersonation threat specifically targeting users interested in cryptocurrency airdrops. It masquerades as a legitimate platform called Mona Genesis, promising an airdrop checker tool to trick visitors into connecting their wallets or revealing sensitive information. The site is designed to steal funds or credentials, posing a high risk to anyone who interacts with it.

PhishDestroy's analysis confirms the site is still active, with a page title of "Mona Genesis — Airdrop Checker" that reinforces the scam. VirusTotal flags it with 2 out of 95 security vendors marking it as malicious, while AlienVault OTX includes it in one threat intelligence pulse. The domain was created on May 20, 2026, and registered through Name.com, Inc., with an SSL certificate from Let's Encrypt (E8) that lends a false sense of security. It resolves to IP 104.21.8.28 and appears on one security blocklist, further corroborating its malicious nature.

If you have visited monacoin.xyz, immediately disconnect any cryptocurrency wallet that was used on the site and revoke permissions for any suspicious smart contracts. Change passwords for any accounts where credentials may have been entered, and enable two-factor authentication. Monitor your accounts and wallets for unauthorized transactions. Report the domain to your security team and block it at the network level to prevent further exposure.