claim[.]usdai[.]click

PhishDestroy identifies claim.usdai.click as an active crypto drainer domain currently deployed in phishing campaigns. The domain mimics legitimate USDai services to deceive users into connecting crypto wallets and authorizing malicious transactions. This infrastructure is categorized as elevated risk due to its operational status and targeting of cryptocurrency holders seeking USDai-related services.

This domain resolves to IP 188.114.97.3 and was registered through Dynadot, LLC on April 05, 2026. It holds a valid SSL certificate issued by Let's Encrypt, increasing its perceived legitimacy. Security analysis conducted via VirusTotal reveals that 1 out of 95 participating vendors flagged this domain as malicious. No additional blocklist data was available at the time of assessment. The domain’s recent creation date and low detection rate suggest a newly launched campaign designed to evade early-stage detection mechanisms.

The domain remains active as of the latest analysis. Users are strongly advised to avoid interacting with claim.usdai.click or any associated links and to verify the legitimacy of any USDai-related website through trusted channels. Immediate reporting to PhishDestroy is recommended to support ongoing threat intelligence efforts. Cryptocurrency users should exercise heightened caution when prompted to connect wallets or input private keys, and enable multi-factor authentication on all wallet and exchange accounts. Network defenders should consider blocking the domain at DNS and firewall levels based on the provided indicators.