usdgift[.]cc

This domain, usdgift.cc, is identified as a cryptocurrency credential harvesting site designed to steal wallet login credentials and recovery phrases. Analysis indicates the site employs deceptive interfaces mimicking legitimate cryptocurrency platforms, tricking users into entering sensitive authentication details. The domain specifically targets users of decentralized finance (DeFi) and wallet services, posing a severe risk of financial theft and unauthorized account access. Infrastructure analysis reveals the domain was registered on May 24, 2026, through NameCheap, Inc., and currently resolves to the IP address 172.67.142.116. It is flagged by 17 out of 95 security vendors on VirusTotal, and appears on three distinct security blocklists. The domain utilizes a Let's Encrypt SSL certificate (serial number E7), which, while providing encryption, does not validate legitimacy. Its presence on multiple blocklists, including those maintained by cryptocurrency security entities, further corroborates its malicious intent. Users who have visited usdgift.cc or entered credentials on the site should immediately revoke access to any associated wallets or accounts. It is critical to transfer remaining funds to a new, secure wallet and monitor all linked accounts for unauthorized transactions. Additionally, affected users should reset passwords and enable multi-factor authentication on all related platforms. Given the high-risk nature of this domain, any interaction with it warrants a thorough review of connected devices for malware or unauthorized access.