dcentpcapp[.]com

This domain, dcentpcapp.com, poses a targeted phishing threat by impersonating the official D'CENT Wallet firmware update portal. Analysis of the page title, 'D'CENT Wallet | Firmware Update,' indicates an attempt to deceive users into downloading malicious software or submitting sensitive credentials under the guise of a legitimate cryptocurrency wallet update. The infrastructure is designed to exploit trust in hardware wallet security, potentially leading to unauthorized access to private keys, recovery phrases, or other authentication details. Given the elevated risk level, this domain represents a significant threat to users of D'CENT Wallet or similar cryptocurrency storage solutions. Evidence supporting this assessment includes multiple technical indicators. The domain was registered on June 11, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 64.29.17.65 and is flagged by 4 out of 95 security vendors on VirusTotal, indicating detection by a subset of the security community. Additionally, the domain appears on one security blocklist and has a trust score of 0/100, further confirming its malicious nature. The SSL certificate issued by Let's Encrypt provides a false sense of security, as it does not validate the legitimacy of the site's content or intent. Users who visited dcentpcapp.com or interacted with its content should take immediate action to mitigate potential risks. First, disconnect any devices that may have connected to the domain and refrain from entering any credentials or downloading files. Scan the affected device using updated security tools to detect and remove any malicious payloads. If cryptocurrency wallet credentials or recovery phrases were submitted, transfer assets to a new wallet immediately and revoke access to the compromised wallet. Monitor accounts for unauthorized transactions and report the incident to relevant security teams or platforms for further investigation. Given the domain's current offline status, users should remain vigilant for similar phishing attempts targeting cryptocurrency infrastructure.