dropusdc[.]fun

This domain, dropusdc.fun, is actively hosting a cryptocurrency wallet drainer designed to steal USDC and other digital assets. Victims are lured through phishing links or deceptive ads, then prompted to connect their wallets to a fake interface. Once connected, the site executes unauthorized transactions, draining funds to attacker-controlled addresses. The threat specifically targets users of decentralized finance platforms and popular wallet extensions, exploiting trust in the USDC stablecoin brand. Analysis indicates the domain was registered on April 20, 2026, through HOSTINGER operations, UAB, a registrar frequently abused for malicious infrastructure. It resolves to the IP address 216.198.79.1 and uses a Let's Encrypt SSL certificate to appear legitimate. At the time of assessment, 6 out of 95 security vendors on VirusTotal have flagged dropusdc.fun as malicious, with detections including generic phishing, crypto scam, and wallet drainer classifications. The elevated risk level is supported by the domain's recent creation, low detection count (suggesting evasion techniques), and direct targeting of financial assets. If you visited dropusdc.fun or connected a wallet to the site, immediately disconnect the wallet from all dApps and revoke any suspicious permissions using a blockchain explorer or wallet management tool. Transfer remaining funds to a new, secure wallet address and monitor all linked accounts for unauthorized transactions. Report the incident to your wallet provider and relevant cybersecurity authorities, providing the domain, IP address 216.198.79.1, and any transaction hashes associated with the attack. Do not interact with the site further, as it may deploy additional malicious scripts or redirect to secondary payloads.