usdfun[.]xyz

This domain, usdfun.xyz, was set up to trick people into thinking it was a legitimate token launch platform called usd.fun, but it was actually a phishing site. The goal was likely to steal login credentials, private keys, or other sensitive information from cryptocurrency users who thought they were interacting with a real service. Even though the site is now offline, similar threats could appear at any time, so it's important to stay cautious.

PhishDestroy discovered this threat through multiple sources. VirusTotal shows that 5 out of 95 security vendors flagged the domain as malicious, which is a strong indicator of danger. The domain was created on February 16, 2026, through Name.com, Inc., and featured an SSL certificate from Let's Encrypt (R12) to appear more trustworthy. At the time of analysis, the site was taken offline, but it previously resolved to IP address 64.29.17.1 and appeared on one security blocklist.

If you visited usdfun.xyz or entered any information there, take immediate action. Change any passwords or credentials you may have used, and enable two-factor authentication on all your accounts. Monitor your financial accounts for unauthorized activity, and consider running a security scan on your devices. If you suspect your cryptocurrency wallet has been compromised, transfer funds to a new wallet. Stay vigilant against similar phishing domains and always verify URLs carefully before entering sensitive data.