iusdcoin[.]xyz

PhishDestroy identifies iusdcoin.xyz as an active generic phishing domain propagating under the guise of a cryptocurrency service. This domain is a suspected cryptocurrency drainer kit designed to impersonate USDT wallet authentication portals. The page title in Chinese (欢迎,跳转中....) suggests redirection to a localized phishing interface, likely targeting users unfamiliar with English-language scams. No known association with legitimate cryptocurrency brands such as Tether or USDT has been confirmed at this stage.

Technical analysis reveals critical indicators: the domain resolves to IP address 107.151.247.17 and was registered on April 01, 2026 through Namecheap. VirusTotal currently shows 14/95 detections, indicating zero AV coverage. The domain uses a valid Let's Encrypt SSL certificate, increasing trust perception. Google Safe Browsing (GSB) status remains unflagged, and no blocklist entries have been recorded as of the latest scan. The seed identifier 764c6a confirms this as a tracked but unmitigated threat.

The campaign remains active and undetected across major security platforms. Immediate action is required: users should avoid accessing iusdcoin.xyz and block the IP 107.151.247.17 at the network perimeter. Organizations are advised to integrate this domain and IP into firewall and DNS blocklists. While current risk is elevated due to zero detections, the combination of recent registration, Chinese-language lure, and drainer kit behavior signals high potential for financial theft. Continuous monitoring and proactive blocking are essential to prevent victimization.