usdc-eth26[.]top

Analysis of the domain usdc-eth26.top, registered on February 21 2026 through Gname.com Pte. Ltd., shows that the site was hosted on Cloudflare’s network (AS13335) and resolved to IP 172.67.144.46 located in the United States. The domain employed a Google Trust Services certificate issued under the WE1 root, indicating a valid TLS handshake. DNS resolution used Cloudflare’s authoritative name servers adam.ns.cloudflare.com and chan.ns.cloudflare.com. Front‑end assets were identified as Vue.js components served via jsDelivr, with HTTP requests mediated by Axios and the site supporting HTTP/3.

The page title returned by the server was “defi‑ETH”, and the intelligence feed classifies the activity as a crypto‑related scam. VirusTotal scans reported that seven of ninety‑three AV engines flagged the domain, and the indicator appears on a single public blocklist, where it has been listed by PhishDestroy. AlienVault OTX includes the domain in one pulse, further corroborating malicious use. A Gridinsoft trust score of 0 out of 100 reflects the low reputation of the site.

The current HTTP status is offline, suggesting the operator has taken the site down, but the infrastructure remains observable. Defenders should continue to block the IP 172.67.144.46 and the associated hostnames, monitor Cloudflare‑hosted domains for similar patterns, and add the domain to internal phishing and crypto‑scam watchlists. Because the content of the landing page has not been captured, further investigation is required to determine the exact phishing vector and any credential‑stealing forms that may have been deployed.