usdc-app[.]gabriel-galati[.]com

This domain, usdc-app.gabriel-galati.com, is flagged as a high-risk generic phishing site targeting individuals interested in cryptocurrency wallets. The domain was registered through Cloudflare, Inc. on February 21, 2026, and currently resolves to an IP address located in the United States, specifically under the control of Amazon.com, Inc. (AS16509). The site uses Vercel for deployment and has implemented HTTP Strict Transport Security (HSTS) to enforce secure connections, which can be a tactic to appear more legitimate and trustworthy to potential victims. The domain's SSL certificate is issued by Let's Encrypt, a reputable certificate authority, further adding to the illusion of security. However, the low Gridinsoft trust score of 0/100 and the fact that it appears on a security blocklist, such as PhishDestroy, are strong indicators of its malicious nature. Only one out of 95 security vendors on VirusTotal has flagged this domain, which suggests that while the majority of vendors have not yet identified it as a threat, the minority opinion should not be overlooked. Defenders should remain cautious and consider this domain a potential risk, especially given its active status and the known association with cryptocurrency scams. It is recommended to monitor this domain closely, block access to it, and educate users on the signs of phishing attacks, particularly those involving cryptocurrency. The combination of a legitimate SSL certificate, secure deployment technologies, and a low trust score from specialized threat intelligence platforms provides a comprehensive picture of the domain's threat level. Defenders should also verify the reputation of any domain that purports to offer cryptocurrency services and ensure that their security policies are up-to-date to mitigate the risks associated with such scams.