iusdcoin[.]world

This domain, iusdcoin.world, is identified as a high-risk phishing infrastructure specifically designed to operate as a crypto wallet drainer. Analysis indicates the site impersonates a legitimate cryptocurrency token, IUSD Coin, to deceive users into connecting their wallets. The fraudulent interface likely employs a drainer kit to automatically siphon funds upon interaction, a common tactic in decentralized finance scams. No legitimate blockchain project or token is associated with this domain, reinforcing its classification as malicious infrastructure. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 11 out of 95 security vendors on VirusTotal, indicating broad detection across multiple threat intelligence platforms. It was registered through NameCheap, Inc., a registrar frequently abused for phishing operations due to its accessibility and low-cost domain services. The domain resolves to the IP address 107.151.247.118, which has been linked to prior malicious activity in other campaigns. Created on April 01, 2026, the domain exhibits a future registration date, a red flag often associated with bulk-registered fraudulent domains intended for short-term use. The domain appears on four independent security blocklists and is actively blocked by multiple wallet security extensions and DNS filtering services. As of the latest assessment, iusdcoin.world has been taken offline, likely in response to detection and reporting by security researchers and automated systems. However, the underlying infrastructure remains a residual risk, as threat actors may re-deploy the same drainer kit or domain pattern under a new address. Users who interacted with the site are advised to immediately revoke any connected wallet permissions, transfer assets to a secure wallet, and monitor transaction histories for unauthorized activity. Organizations should update internal blocklists to include the domain and associated IP, and monitor for similar patterns in newly registered domains using the same registrar or hosting provider.