Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
usdcrichman[.]org
“DeFi-ETH”
Observation enregistrée
Contraste de titres observé
Résumé des preuves
This domain is flagged for elevated risk due to its association with generic phishing activity targeting cryptocurrency users. Analysis indicates the site impersonates DeFi-ETH platforms, likely designed to harvest wallet credentials or distribute malicious smart contract interactions. The threat type aligns with credential theft and financial fraud, common in decentralized finance scams. Infrastructure analysis reveals multiple technical indicators of compromise. The domain usdcrichman.org is detected by 3 out of 95 security vendors on VirusTotal, appears on 1 security blocklist, and holds a Gridinsoft trust score of 0/100. It resolves to IP address 188.114.96.3, hosted behind Cloudflare infrastructure. The domain was registered on February 21, 2026, through Gname.com Pte. Ltd., with an anomalous future creation date suggesting fraudulent registration practices. Technologies detected include Vue.js, jsDelivr, Cloudflare Browser Insights, HTTP/3, and Axios, which are often leveraged to create convincing fake interfaces. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. Mitigation steps for this threat type include immediate blocking of the domain and associated IP 188.114.96.3 at the network perimeter. Organizations should update endpoint protection rules to flag related indicators, particularly the domain name and page title 'DeFi-ETH.' Users who interacted with the site should revoke active smart contract approvals, rotate credentials for all cryptocurrency wallets, and monitor transaction histories for unauthorized activity. Security teams should correlate logs for connections to the IP or domain, focusing on outbound requests to decentralized finance platforms. The anomalous 2026 registration date can serve as a detection rule for similar scam domains.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260211-843A44- Artefact PDF
- Preuve PDF
Texte intégral des preuves
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
10 sources externes surveillées Aucune correspondance
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of usdcrichman.org · checked Jun 27, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif