usdc[.]lezadatechnologies[.]net

The domain usdc.lezadatechnologies.net was registered on October 10, 2025 through NameCheap, Inc. and resolves to the IP address 159.198.74.205, which is hosted in the United States under ASN 22612 (Namecheap). The authoritative nameservers are ns1.lezadatechnologies.net and ns2.lezadatechnologies.net. No TLS certificate was observed, indicating the site was served over plain HTTP. The page title returned by the server is "USDC", and the infrastructure is classified as a crypto‑related brand impersonation targeting UPS, as indicated by the listed brand target and scam type.

VirusTotal scans show that six of ninety‑five security vendors flagged the domain, and Gridinsoft assigned a trust score of zero out of one hundred, reflecting a high likelihood of malicious activity. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service. Current monitoring indicates the site is offline, and the blocking status remains in effect. Analysis confirms that the domain was used to host a UPS‑impersonating crypto scam, but the exact content of the landing page has not been captured, leaving the specific tactics (e.g., credential harvesting or payment diversion) uncertain.

Defenders should continue to enforce blocklist rules that include this domain, monitor DNS queries for the associated IP and nameservers, and consider adding the IP address to network‑level deny lists. Because the domain lacks SSL, any future re‑activation would likely remain unencrypted, making it detectable by HTTP inspection tools. Organizations should also verify that no outbound connections to 159.198.74.205 are permitted from internal hosts and should update endpoint detection signatures to reflect the observed VirusTotal detections. Ongoing vigilance is recommended to catch any re‑use of the same registrar or hosting provider for similar impersonation campaigns.