usdc[.]zminer[.]site

The domain usdc.zminer.site was created on September 08, 2025 and is currently taken offline. Infrastructure analysis shows it is hosted on Cloudflare’s network (ASN 13335) and resolves to the IP address 172.67.144.108, a location attributed to the United States. The domain is delegated to the Cloudflare nameservers carter.ns.cloudflare.com and desiree.ns.cloudflare.com and was registered through Atak Domain. No SSL certificate is presented, indicating the site was served over plain HTTP, which is consistent with a low‑cost phishing deployment that avoids the overhead of TLS.

The page title returned by the server, "USDC - THE BEST AI MINER FOR USDC," suggests a fraudulent offering aimed at cryptocurrency investors, specifically USDC holders, by promising an AI‑driven mining service. VirusTotal recorded a single positive detection out of 95 scanned security vendors, providing limited but concrete evidence of malicious classification. The domain is listed on one public blocklist and has a Gridinsoft trust score of 0 out of 100, reinforcing the assessment of high risk. PhishDestroy has actively blocked the domain, confirming its identification as a phishing vector.

Defenders should add usdc.zminer.site to URL filtering policies, email gateway blocklists, and endpoint protection allowlists to prevent accidental access. Continuous monitoring of the associated IP address and Cloudflare nameservers is advised, as threat actors may repurpose the same hosting resources for new malicious domains. Given the lack of SSL and the offline status, any future re‑hosting of the domain would likely retain the same risk profile, so alerts should be configured for any DNS resolution or HTTP response from this host. The limited detection footprint underscores the importance of proactive blocklist updates and threat‑intel sharing to mitigate exposure to this specific phishing campaign.