claim-monad[.]xyz

This domain, claim-monad.xyz, is flagged as a high-risk crypto drainer and is currently active as of the report date. The domain was registered on August 03, 2026, through GMO Internet Group, Inc. d/b/a Onamae.com, and its infrastructure resolves to IP address 13.248.169.48. The registration date, combined with the immediate threat classification, indicates a purpose-built malicious operation rather than a compromised legitimate site.

Security telemetry is substantial. VirusTotal shows 11 of 91 security vendors flagging the domain as malicious, and it appears on three separate security blocklists. It is blocked by PhishDestroy, MetaMask, and SEAL, which are widely used protective layers in the cryptocurrency ecosystem. AlienVault OTX lists the domain in two distinct threat intelligence pulses, confirming that multiple independent research groups have correlated this domain with active phishing campaigns. The domain's nameservers, ns5.afternic.com and ns6.afternic.com, suggest the domain is parked or brokered through Afternic, which is unusual for an actively malicious domain and may indicate a fast-flux or disposable infrastructure pattern, though this is not conclusive.

The exact content of the site has not been analyzed in the provided data, so the specific page design, text, or wallet addresses are unknown. What is certain is the classification as a crypto drainer, meaning the site is engineered to trick users into connecting wallets and approving transactions that siphon funds. The domain name itself, which references the Monad blockchain ecosystem, is a social engineering lure to attract users seeking airdrops or network interactions.

Defenders should treat this domain as a confirmed threat. Users should avoid visiting it, and any wallet that has interacted with it should be considered compromised. Network administrators should block the domain and its IP at the DNS and firewall levels.