xn--monshot-2uc[.]net

This domain, xn--monshot-2uc.net, is identified as a crypto wallet phishing resource targeting users through deceptive infrastructure. Analysis indicates the site mimics legitimate cryptocurrency platforms to harvest wallet credentials and private keys. No direct association with known drainer kits has been confirmed, though the domain's Punycode format (xn--) suggests an attempt to obfuscate its true nature and evade casual detection. The threat category is classified as generic_phishing with an elevated risk level due to its financial fraud objectives. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited. As of the latest scan, VirusTotal reports 9 out of 95 security vendors flagging the domain as malicious. The domain appears on two independent security blocklists and is actively blocked by multiple fraud detection systems. No associated IP address or Google Safe Browsing (GSB) listing was recorded prior to takedown, limiting further network-level attribution. The page title, displaying a 522 connection timeout, suggests the hosting infrastructure was either disrupted or intentionally disabled. The domain is currently offline, reducing immediate exposure to end users. However, the registration remains active, and the infrastructure could be reactivated with minimal effort. The registrar, NiceNIC International Group Co., Limited, has not publicly disclosed any enforcement actions against the domain. Users who interacted with the site prior to takedown are advised to revoke any connected wallet permissions and monitor accounts for unauthorized transactions. Continued vigilance is recommended, as similar domains may emerge using comparable obfuscation techniques.