usdcep[.]com
“USDC”
Resumo das evidências
PhishDestroy has identified usdcep.com as a confirmed generic phishing threat with an elevated risk level. This domain was designed to impersonate the USDC cryptocurrency brand, using a deceptive page title of 'USDC' to lure unsuspecting users into connecting their wallets or entering sensitive login information. The site likely employed a crypto drainer kit to siphon funds from victims who interacted with the fake interface, capitalizing on the trust associated with the legitimate USDC stablecoin.
Technical indicators paint a clear picture of the threat. VirusTotal data reveals that 11 out of 95 security vendors flagged the domain as malicious, providing strong corroboration of its phishing nature. The domain was created on October 25, 2025, and was registered through eName Technology Co., Ltd., a Chinese registrar. It resolved to IP address 104.21.63.100, which is associated with Cloudflare, a common hosting provider for malicious sites seeking to obscure their origin. Additionally, the domain appears on at least one security blocklist, and critically, it had no SSL certificate, which is a red flag for any site claiming to handle cryptocurrency transactions. Google Safe Browsing (GSB) likely flagged the site as dangerous.
As of the latest check, usdcep.com has been taken offline, which is a positive outcome following detection and reporting. PhishDestroy continues to monitor the domain for any signs of reactivation or DNS changes. Users who may have visited the site should immediately check their cryptocurrency wallets for unauthorized transactions and ensure they have not inadvertently approved malicious contract interactions. The response actions involved alerting relevant authorities and registrars, leading to the domain's suspension. However, the registrant may create similar domains in the future, so ongoing vigilance is recommended. To verify any USDC-related URLs, always use PhishDestroy's resources or official USDC channels before connecting a wallet or entering credentials.
Data Coverage
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 11/08/2026
10 fontes externas monitoradas Sem correspondência
Linha do tempo de detecção
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Inteligência forense
Análise do VirusTotal
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo