iusdcoin[.]ink

PhishDestroy identifies iusdcoin.ink as a live crypto-drainer domain that mimics USD Coin to trick visitors into connecting wallets and signing malicious transactions. The site is currently unflagged on VirusTotal despite its active campaign, with 0 detections out of 95 engines at the time of analysis. This domain was registered on April 1, 2026, through NameCheap, Inc., and resolves to 107.151.247.68 using a Let’s Encrypt SSL certificate, all indicators that suggest a hastily deployed but potentially dangerous operation.

This threat operates by presenting a fake USD Coin interface to visitors, often reached via social media links or spoofed emails. Once a user connects a cryptocurrency wallet, the site prompts for signature requests that drain tokens directly from the connected wallet without requiring private key exposure. Because the domain is only days old and unflagged, it can evade browser filters and appear legitimate at first glance. The combination of a recent creation date, low detection rate, and active hosting suggests this campaign is still in its early, aggressive phase targeting unsuspecting crypto holders.

If you visited iusdcoin.ink or connected your wallet, immediately revoke any permissions granted to the site using your wallet’s “connected apps” or “revoke access” feature. Do not sign any additional transaction requests from this domain. Run a full antivirus scan and consider transferring remaining funds to a new wallet with a different seed phrase. Always verify URLs manually and use PhishDestroy’s real-time scanner before interacting with crypto-related sites. Report the domain immediately to help block its spread and protect others.