dump-central[.]cc

This domain, www.dump-central.cc, is identified as a confirmed crypto credential harvesting site designed to extract wallet login credentials and private keys from unsuspecting users. Analysis indicates the infrastructure is tailored for cryptocurrency phishing, likely leveraging a drainer kit to automate the theft of digital assets upon credential submission. No direct brand impersonation is observed, but the domain name and structure suggest targeting users of decentralized finance platforms or wallet services. Infrastructure analysis reveals the domain was registered on January 20, 2026, through GoDaddy.com, LLC, and currently resolves to the IP address 104.21.79.220. As of the latest assessment, the domain is flagged by 5 out of 95 security vendors on VirusTotal, indicating moderate detection coverage. The SSL certificate is issued by Google Trust Services, providing a veneer of legitimacy while the domain remains unlisted on Google Safe Browsing. No additional blocklist entries or takedown requests are recorded at this time, suggesting the campaign may still be in its early or expanding phase. The domain remains active and operational, posing a high risk to users who may encounter it through phishing emails, malicious advertisements, or compromised third-party platforms. Response actions should include immediate reporting to the registrar for suspension, submission to additional threat intelligence feeds, and inclusion in enterprise and consumer security solutions. Despite partial detection, the low vendor flagging rate underscores the need for heightened vigilance, as the domain may evade some automated defenses. Users are advised to verify domain authenticity before entering credentials, enable multi-factor authentication on wallet services, and monitor for unauthorized transactions.