monad[.]yeetcaster[.]xyz

PhishDestroy has identified monad.yeetcaster.xyz as a brand impersonation threat targeting the Monad cryptocurrency project. The domain hosts a fraudulent version of YeetCaster, a platform described as "Turn Takes into Markets," designed to deceive users into connecting their wallets or revealing sensitive information. No specific drainer kit has been publicly named, but the site's functionality strongly suggests a crypto drainer or credential harvesting scheme. The threat level is elevated due to the precise impersonation of Monad's brand and the active targeting of its community.

Technical indicators reveal that the domain was created on June 4, 2025, registered through Tucows Domains Inc., and resolves to IP address 66.33.60.67. It uses a Let's Encrypt SSL certificate (R13) to appear legitimate. VirusTotal data shows 12 out of 95 security vendors flagging the domain as malicious, and it appears on one security blocklist. However, Google Safe Browsing (GSB) status is not explicitly negative, meaning users may not receive browser warnings. These factors combined present a clear risk to Monad users who might be lured by the familiar brand name and yeetcaster concept.

The domain has been taken offline following identification and reporting, reducing immediate danger. However, the underlying infrastructure remains, and similar domains may resurface. Users should remain vigilant and always verify URLs on PhishDestroy before interacting with any Monad-related sites. PhishDestroy recommends avoiding unsolicited links, enabling two-factor authentication, and never sharing private keys or seed phrases. Continued monitoring is advised as the threat actors may pivot to new domains.