usdcpol[.]com

Phishing domain usdcpol.com impersonates USDC services to deceive users. Despite its current offline status, it has been flagged by three out of 95 vendors on VirusTotal, signaling its malicious intent. The domain is also listed on two public blocklists, PhishDestroy and ScamSniffer, highlighting its recognition as a threat within the cybersecurity community.

Registered through GMO Internet, Inc. and hosted on an IP associated with CloudFlare, Inc. in Canada, usdcpol.com lacks an SSL certificate, which is often a red flag for phishing sites. The absence of SSL indicates that any data transmitted through the site would not have been encrypted, increasing the risk for potential victims who might have interacted with it.

The domain's creation date is set in the future, March 25, 2026, which is likely an error or an attempt to bypass certain detection mechanisms. This anomaly, combined with its rapid takedown, suggests that the operators intended to exploit the domain for a short period, targeting users during a critical window before widespread detection. The swift action to list it on blocklists and its offline status indicate effective intervention by security teams to mitigate its impact.