usdcethh[.]site

Analysis indicates that usdcethh.site is an active cryptocurrency phishing domain registered on February 21, 2026, through Go Daddy, LLC. The domain resolves to IP 172.67.197.147 (AS13335, Cloudflare, Inc., US) and is currently flagged by one security blocklist, including PhishDestroy. The page title 'defi-ETH' and classified scam type suggest a focus on decentralized finance (DeFi) or Ethereum-related fraud. Infrastructure analysis reveals the use of Cloudflare nameservers (adam.ns.cloudflare.com, chan.ns.cloudflare.com), Cloudflare Browser Insights, and HTTP/3, alongside frontend technologies such as Vue.js, jsDelivr, and Axios. The SSL certificate is issued by Google Trust Services (WE1), which is consistent with legitimate services but does not mitigate the domain's malicious classification. VirusTotal reports 4 of 93 security vendors detecting this domain as malicious, though the absence of additional context limits the weight of this indicator. The domain's creation date (less than five months old) and immediate association with phishing activity align with typical malicious domain lifecycle patterns. No evidence of takedown or inactive status was observed as of July 12, 2026. Defenders should treat this domain as high-risk and prioritize blocking it at the DNS or network level. Given its association with cryptocurrency scams, monitoring for related wallet addresses, transaction patterns, or linked domains may aid in broader threat mitigation. Further investigation into the site's exact content or backend infrastructure is recommended, though no additional technical indicators are currently available.