usdcking[.]org

The domain usdcking.org has been identified as a generic phishing site specifically targeting cryptocurrency users. It poses a significant risk as it was used to trick users into revealing sensitive information or performing actions that could lead to financial loss. The site has been taken offline, but past visitors should remain vigilant and take necessary precautions to secure their accounts and funds.

According to available data, 3 of 95 vendors on VirusTotal flagged usdcking.org as malicious, including Fortinet, Gridinsoft, and SOCRadar. The domain was registered through Gname.com Pte. Ltd. on February 21, 2026, and resolves to the IP address 188.114.96.3, which is located in the US and associated with AS13335 Cloudflare, Inc. The site appears on 1 security blocklist, PhishDestroy, and uses an SSL certificate issued by Google Trust Services / WE1. Technologies detected on the site include Vue.js, jsDelivr, Cloudflare, Axios, and HTTP/3.

If a user has visited usdcking.org, they should immediately revoke any token approvals and move their cryptocurrency funds to a new, secure wallet. For those who may have entered login credentials, changing passwords and enabling two-factor authentication (2FA) is crucial. Users should also monitor their accounts for any unauthorized transactions or suspicious activity. Reporting the incident to the relevant cryptocurrency exchange and security authorities is recommended to help prevent further phishing activities.