monadairdrop[.]cc

This domain, monadairdrop.cc, was registered on 16 October 2025 through NameSilo, LLC and is presently taken offline. The site presented the page title “Monad | The Most Performant EVM-Compatible Layer 1 Blockchain,” a phrasing unrelated to the advertised airdrop, which aligns with the classification of a fake‑airdrop campaign targeting users of the Base platform. The domain resolves to the IP address 64.29.17.65, hosted on Amazon.com, Inc. (AS16509) in the United States. No TLS certificate is deployed, and the nameservers are ns1.vercel-dns.com and ns2.vercel-dns.com.

Threat intelligence feeds have flagged the host: VirusTotal records show 12 of 95 security vendors marking the domain as malicious, and the domain appears on four external blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. Gridinsoft assigns a trust score of 0/100, indicating a high likelihood of malicious intent. The infrastructure signals a classic brand‑impersonation vector, deliberately referencing Base while using unrelated branding in the page title to lure cryptocurrency enthusiasts.

Current evidence does not reveal the exact phishing payload or any captured credentials, leaving the operational details of the campaign uncertain. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the host, and incorporate the IP address 64.29.17.65 into threat‑intel feeds. Users should be warned that unsolicited airdrop offers from monadairdrop.cc are fraudulent and that any interaction with the site may compromise their crypto assets.