usdc[.]wssrevip[.]vip

The domain usdc.wssrevip.vip is a phishing site that targets cryptocurrency users by imitating CIRCLE branding. Although it has been taken down, it was flagged as malicious by 16 out of 93 vendors on VirusTotal, indicating significant detection across security platforms. Additionally, it appears on three public blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL, and is flagged by Google Safe Browsing.

The site was registered through Gname.com Pte. Ltd. and hosted on an IP address in the United States, specifically under AS8796 FASTNET DATA INC. Notably, the domain lacks an SSL certificate, which is a common trait among phishing sites, as it allows them to avoid certain security checks. The domain was created on February 21, 2026, but was detected by PhishDestroy nearly a month earlier, on January 23, 2026, highlighting the proactive detection capabilities of PhishDestroy's systems.

Despite being offline now, the domain's activity underscores the persistent threat posed by phishing sites, especially those targeting cryptocurrency users. The use of CIRCLE branding suggests an attempt to exploit the trust associated with legitimate financial services. The swift action by security vendors and blocklists has mitigated the threat, but the incident serves as a reminder of the importance of early detection and response in the fight against phishing.