dccqe[.]com

Analysis of dccqe.com indicates a high‑risk brand‑impersonation operation targeting Binance users. The domain was registered on 28 October 2025 through eName Technology Co.,Ltd. and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Cloudflare‑provided nameservers rajeev.ns.cloudflare.com and saanvi.ns.cloudflare.com are in use, but no SSL certificate is presented, meaning the site would be accessed over plain HTTP if it were online. Google Safe Browsing flags the domain for social‑engineering activity, and Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating.

VirusTotal reports that 11 of 95 security vendors have flagged the domain, reinforcing the malicious assessment. The page title observed during the brief scan was "USDC," which aligns with the reported scam type of wallet/seed phishing, a common tactic for harvesting cryptocurrency private keys under the guise of a legitimate Binance service. The domain is currently offline, having been taken down by the PhishDestroy takedown service, and it appears on one public security blocklist.

While the offline status limits immediate interaction, the combination of brand impersonation, a low trust score, Safe Browsing warning, vendor detections, and lack of TLS creates a compelling profile of a credential‑stealing site. Defenders should continue to block dccqe.com at perimeter filters, monitor for any re‑hosting attempts, and update internal phishing detection rules to include the observed page title and the specific IP range. Threat‑intel feeds should be enriched with the registrar and nameserver details, and incident response teams should advise users to verify URLs before entering Binance credentials or seed phrases, emphasizing that legitimate Binance services always employ HTTPS and recognizable domain naming patterns.