gusewin256[.]pro

PhishDestroy identifies gusewin256.pro as an active cryptocurrency drainer posing as a legitimate service. This domain was flagged for its malicious intent to deceive users into connecting cryptocurrency wallets, enabling unauthorized fund transfers. The threat actor behind this site leverages social engineering tactics, such as impersonating legitimate crypto services, to trick users into signing malicious transactions that drain their digital assets directly from connected wallets. This domain was registered through Fewmoretaps OU d/b/a Trustname.com, a registrar known for enabling malicious activity. gusewin256.pro first appeared on March 30, 2026, and currently shows 0 detections out of 95 scanners on VirusTotal, indicating it has not yet been widely blacklisted. The domain resolves to IP 172.67.151.234 and holds a valid SSL certificate issued by Let's Encrypt, which may lend a false sense of legitimacy. The absence of detections highlights the need for proactive threat intelligence, as new malicious domains often fly under the radar until significant harm occurs. Users who visited gusewin256.pro or interacted with it should immediately disconnect any connected cryptocurrency wallets and revoke permissions granted to the site. Scan your devices for malware, monitor wallet transactions, and report the domain to PhishDestroy. Avoid using or funding any services associated with this domain. Always verify URLs, check for HTTPS, and confirm third-party endorsements before engaging with unfamiliar crypto platforms. Stay vigilant, as cryptocurrency drainers evolve rapidly and often exploit urgency and trust to steal funds.