usdcstore[.]app

This domain, usdcstore.app, is identified as a crypto drainer phishing site impersonating the USDC stablecoin brand. Analysis of the page title, "USDC Store Sandbox," and associated infrastructure suggests an intent to deceive users into connecting wallets or entering private keys, enabling unauthorized asset transfers. No explicit drainer kit signatures were observed, but the domain aligns with known tactics used in cryptocurrency theft operations targeting decentralized finance (DeFi) users. Infrastructure analysis reveals the domain was registered through NameCheap, Inc. on February 21, 2026, and resolves to the IP address 75.2.60.5. Detection metrics include a VirusTotal score of 1/95, indicating limited but present security vendor confirmation. Google Safe Browsing classifies the domain under "SOCIAL_ENGINEERING," and it appears on four security blocklists. Technologies detected include Node.js, React, Next.js, Netlify, HSTS, and Webpack, which are consistent with modern phishing frameworks designed to mimic legitimate platforms. The domain is currently offline, reducing immediate risk to users. However, prior activity and infrastructure remain a concern, as threat actors may reactivate or replicate the campaign under a new domain. Response actions should include monitoring for re-registration attempts, updating blocklists, and alerting cryptocurrency wallet providers to potential credential harvesting risks. Users who interacted with the domain are advised to revoke wallet permissions and audit transaction histories for unauthorized activity.