optcoinuhpg[.]com

The domain optcoinuhpg.com was identified as a brand impersonation phishing site specifically targeting Apple users. Although the page title displayed "OPTCOIN," the site was designed to mimic Apple's branding and trick visitors into connecting their cryptocurrency wallets, effectively functioning as a crypto drainer. This type of threat poses a direct risk to users' digital assets by attempting to authorize malicious transactions under the guise of a legitimate Apple service.

Evidence gathered by PhishDestroy reveals that the domain was created on October 6, 2025, and registered through Gname.com Pte. Ltd. It resolves to IP address 104.21.11.28 and does not have an SSL certificate, a critical red flag for any site handling sensitive information. VirusTotal flagged the domain with 4 out of 95 security vendors marking it as malicious, and it appears on one security blocklist. Additionally, AlienVault OTX includes it in one threat intelligence pulse, confirming its malicious reputation. The site has since been taken offline, but the risk persists for users who may have interacted with it before takedown.

If users visited optcoinuhpg.com or entered any credentials or wallet information, they should immediately revoke any permissions granted and transfer assets to a new, secure wallet. It is also advisable to run a full security scan on their devices and monitor accounts for unusual activity. PhishDestroy recommends always verifying the legitimacy of any site claiming to represent Apple or other major brands, especially those requesting cryptocurrency wallet connections or login credentials.