usdc[.]bz

The domain usdc.bz was registered on February 21, 2026 and currently resolves to the Cloudflare‑served address 188.114.97.3, identified as belonging to AS13335 Cloudflare, Inc. in the United States. The site presents a page titled "Defi-ETH" and is served over TLS 1.2/1.3 with a certificate issued by Google Trust Services under the WE1 designation, indicating a legitimate certificate chain but not mitigating the malicious intent. HTTP responses return a 301 redirect, a pattern often used to funnel visitors to a final payload.

Infrastructure analysis shows the domain is hosted behind Cloudflare and utilizes common front‑end frameworks such as Vue.js, jsDelivr, Axios, and HTTP/3, which are typical of modern web applications but provide no indication of benign purpose. Reputation data is unfavorable: a Gridinsoft trust score of 1 / 100, detection by a single VirusTotal vendor out of 93, and inclusion in two independent blocklists (PhishDestroy and ScamSniffer). AlienVault OTX references the domain in one threat‑intel pulse, reinforcing its classification as a crypto‑related scam.

While the site’s content has not been directly examined, the convergence of a crypto‑focused page title, low trust score, blocklist presence, and the explicit "Crypto Scam" label provides concrete evidence of malicious activity. Defenders should block DNS resolution and HTTP traffic to usdc.bz, add the IP 188.114.97.3 to network deny lists, and monitor for any outbound connections that may attempt to bypass Cloudflare protections. Continuous threat‑intel feeds should be consulted for updates, and any user reports of suspicious activity referencing this domain should be escalated for incident response.