dcqey[.]com

Analysis of dcqey.com indicates that the domain is associated with a crypto‑related phishing campaign. The domain was registered on February 21, 2026 and resolves to the IP address 172.67.177.43, which belongs to the Cloudflare network (AS13335) located in the United States. The site presented a page title of "defi-ETH," aligning with the reported scam type of a crypto scam. Security telemetry shows that the domain appears on one external blocklist and is actively blocked by the PhishDestroy service.

An SSL certificate identified as "WE1" is present on the host, but the certificate details do not mitigate the observed malicious behavior. VirusTotal scanning recorded a single positive detection out of 93 security vendors, confirming that at least one vendor flagged the domain as malicious. Additionally, AlienVault OTX references the domain in one threat‑intel pulse, reinforcing its classification as a malicious indicator.

Current monitoring confirms that the domain has been taken offline, but historical evidence suggests it was used to lure victims into fraudulent cryptocurrency interactions. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑registration attempts, and include the associated IP address and SSL fingerprint in threat‑intel feeds. Ongoing vigilance is advised, especially for organizations handling cryptocurrency transactions, to prevent exposure to similar phishing vectors.