velora[.]st

This domain, velora.st, is flagged as a crypto drainer targeting users under the guise of "Institutional USDC Staking." The infrastructure mimics legitimate staking platforms to deceive victims into connecting wallets, enabling unauthorized fund transfers. Analysis indicates the site employs social engineering tactics, including a fabricated staking interface and institutional branding, to lend credibility to the scam. Infrastructure analysis reveals the domain was registered on May 11, 2026, through the registrar Gname, with an SSL certificate issued by Let's Encrypt. It currently resolves to the IP address 74.0.42.247. Despite its active status, the domain has evaded detection by security vendors, with a VirusTotal score of 0/95. No blocklist entries or prior reports were identified during the initial investigation, suggesting the campaign may still be in its early stages or operating under the radar. Users who visited velora.st or interacted with its staking interface should immediately disconnect any connected wallets and revoke permissions via blockchain explorers. Monitor transaction histories for unauthorized transfers, particularly those involving USDC or other stablecoins. If funds were lost, report the incident to relevant authorities and provide the domain, IP address, and transaction hashes for further analysis. Exercise caution with unsolicited staking offers, especially those promoting institutional yields or requiring wallet connections.