0.cc is a very short, single-character domain that PhishDestroy added to its blocklist after first detecting it on 2026-07-27. No impersonated brand or specific scheme has been confirmed, so it is listed as suspicious rather than tied to a named scam. The site has been dead since 2026-09-13 and was still unreachable when last checked on 2026-10-19.
How the scam works
Without a confirmed page or brand, the exact lure behind 0.cc cannot be described. What the evidence does show is a domain flagged by web-security vendors and threat-intelligence feeds, which usually points to content that leads visitors toward phishing, credential capture or malicious downloads. Short, memorable domains like this are valuable for redirect chains and shortened links, where a victim may land without ever typing the address.
Evidence
On 2026-09-13, VirusTotal showed 2 of 89 engines flagging the domain: Forcepoint ThreatSeeker and SOCRadar. That is a low count, but both are vendors that classify web threats and track external attack surface, so their verdicts carry weight. The domain also appears in two AlienVault OTX pulses, meaning other researchers have linked it to tracked malicious activity, and it is on the PhishDestroy blocklist.
Infrastructure
The domain went offline on 2026-09-13, about seven weeks after PhishDestroy first saw it. That is the same day it was checked on VirusTotal. A short active life followed by abrupt disappearance is a common pattern for disposable malicious domains, though it can also mean the operator simply abandoned it.
What to do
If you visited 0.cc and typed a password, change it everywhere you reuse it and turn on two-factor authentication. If you entered a wallet recovery phrase or private key anywhere you reached through this domain, treat that wallet as compromised and move your funds to a new one. If you downloaded anything, run a malware scan. Defenders should keep the domain blocked at DNS and proxy level, review logs for traffic between 2026-07-27 and 2026-09-13, and watch for the domain coming back online.
I am the victim of an unauthorized USDC transfer on Arbitrum One.
On July 22, 2026 at 07:53:30 UTC, 101.060458 USDC was transferred from my wallet without my knowledge or intentional authorization.
Victim address:
0x80717fe56db0f99917c888275fd83dc9d2f40156
Initial suspe
1 report filed for 0.cc (1 written by a person) · category: Other Hack · 来源核查时间：
“I am the victim of an unauthorized USDC transfer on Arbitrum One.
On July 22, 2026 at 07:53:30 UTC, 101.060458 USDC was transferred from my wallet without my knowledge or intentional authorization.
Victim address:
0x80717fe56db0f99917c888275fd83dc9d2f40156
Initial suspected recipient:
0xb20523c91422814f59251927589698b852e105c2
Unauthorized transaction:
0xd17ed3541260b681d0452dc22ecfaffe01f6f846a0945fbe8f61a5da1f70b954
Transaction record:
https://arbiscan.io/tx/0xd17ed3541260b6”
(SE)
