evmhub[.]net

This domain, evmhub.net, is actively flagged as a high-risk phishing site targeting users with a purported USDC event, as indicated by its page title 'evmhub | USDC Event.' Registered on May 23, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to the IP address 172.67.209.85 and is associated with Cloudflare infrastructure, including HTTP/3 and Cloudflare Browser Insights. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains. Detection data reveals the domain appears in 16 threat intelligence pulses on AlienVault OTX and is blocked by five security blocklists, including Polkadot, Codeesura, and PhishDestroy. Five of 95 security vendors on VirusTotal have flagged the domain, though the specific detection signatures or methodologies are not detailed in available intelligence. Analysis indicates the domain is part of an active phishing campaign, though the exact mechanics of the scam—such as whether it involves credential harvesting, wallet draining, or fraudulent token distribution—remain unconfirmed due to limited visibility into the site's content. The use of Cloudflare may obscure further infrastructure details, complicating attribution or takedown efforts. Defenders should treat this domain as malicious and prioritize blocking it at the network level, particularly in environments where cryptocurrency-related activities are common. Monitoring for related domains registered through the same registrar or resolving to the same IP may help identify additional threats. Given its presence on multiple blocklists and consistent flagging by security vendors, evmhub.net poses a credible risk and should not be accessed or whitelisted.