usdcqb[.]com[.]cn

On July 12, 2026, the domain usdcqb.com.cn was confirmed to be a high-risk brand impersonation phishing site targeting the cryptocurrency brand Arbitrum. This domain has been flagged by 3 security blocklists, including PhishDestroy, MetaMask, and SEAL, and is currently blocked by these services. The domain was created on March 16, 2026, and has been actively used for phishing activities since its creation. The page title, 'USDC钱包 - 安全稳定的美元数字货币钱包解决方案,' suggests that the site is designed to impersonate a legitimate USDC wallet service, luring users into providing sensitive information or credentials. Analysis of the domain's infrastructure reveals that it is hosted by Cloudflare nameservers and resolves to the IP address 154.201.212.209, which is located in Hong Kong under the ASN AS132839 POWER LINE DATACENTER. The domain is registered through 北京新网数码信息技术有限公司, a known registrar for Chinese domains. The HTTP status code 200 indicates that the site is currently operational and accessible. Security assessments, including a Gridinsoft trust score of 0/100, further confirm the malicious nature of the site. Additionally, the domain has been flagged for social engineering by Google Safe Browsing, highlighting its potential to deceive users. Defenders should monitor this domain closely and ensure that it is included in their blocklists to prevent users from accessing it. Network administrators should also consider implementing additional security measures, such as DNS filtering and security awareness training, to mitigate the risk of users falling victim to this phishing site.