996usdc[.]com

The domain 996usdc.com was observed hosting a page with the title “USDC”. The site was provisioned on 1 Nov 2025 through the registrar Gname.com Pte. Ltd. and is served via Cloudflare (AS13335) using the nameservers anita.ns.cloudflare.com and jeremy.ns.cloudflare.com. DNS resolution points to the Cloudflare edge IP 104.21.64.217 located in the United States. TLS termination is performed by Google Trust Services under the WE1 certificate chain, indicating a valid HTTPS endpoint.

HTTP requests return a 403 status code, and the site has been taken offline at the time of analysis. Independent threat‑intelligence feeds have flagged the domain: Google Safe Browsing classifies it as a social‑engineering threat, PhishDestroy has listed it as a blocked phishing resource, and the domain appears on one additional security blocklist. VirusTotal analysis shows 14 of 95 scanners flagging the host as malicious, reinforcing the phishing assessment.

The limited public evidence consists of the page title and metadata; the actual page content has not been captured, so the specific lure or credential‑capture mechanism remains unknown. Defensive recommendations include immediate network‑level blocking of 996usdc.com and its resolved IP address, updating URL filtering and DNS sinkhole rules, and monitoring for other domains that resolve to the same Cloudflare edge node. Given the recent creation date and the involvement of reputable security blocklists, the domain should be treated as high‑risk, and any inbound traffic from corporate endpoints should be denied until the threat is fully remediated.