usdcrh[.]com

Analysis indicates that usdcrh.com was registered on 25 Oct 2025 through eName Technology Co.,Ltd. and resolves to the Cloudflare edge address 104.21.59.69, associated with ASN 13335 in the United States. The domain is currently offline and has been taken down, but historical data show it was used to impersonate Binance and to lure victims into submitting wallet seeds, a classic wallet‑seed phishing scenario. The HTTP response presented a page titled “USDC” and did not present a valid TLS certificate, meaning any HTTPS request would be rejected by browsers. Gridinsoft assigned a trust score of 0 / 100, and VirusTotal recorded 14 detections out of 95 scanners, confirming malicious classification by multiple vendors.

The domain appears on at least one public blocklist and has been flagged by the PhishDestroy sink‑hole service. Nameservers listed in the WHOIS record are rajeev.ns.cloudflare.com and saanvi.ns.cloudflare.com, both operated by Cloudflare, which is consistent with the observed IP address. No additional evidence such as Safe Browsing or Open Threat Exchange entries is present in the supplied data.

Defenders should add usdcrh.com to DNS‑based blocklists, update web‑filter signatures, and monitor for newly registered domains that reuse the same registrar or similar naming patterns. Because the site is already offline, incident response can focus on preventing credential reuse and educating Binance users about the risk of unsolicited seed‑request messages. Continuous surveillance of Cloudflare‑hosted infrastructure and rapid takedown coordination remain recommended.