usdcrq[.]com

The domain usdcrq.com was observed targeting Binance users with a wallet/seed phishing campaign. The site presented the page title "USDC" and was taken offline by the time of reporting on July 23, 2026. Infrastructure analysis shows the domain was hosted on Cloudflare’s network (AS13335) with the IP address 172.67.218.145 located in the United States. Nameserver records point to rajeev.ns.cloudflare.com and saanvi.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service.

Registration details list eName Technology Co.,Ltd. as the registrar, and the domain creation date is recorded as October 25, 2025. No TLS certificate was observed for the host, meaning the site operated without HTTPS encryption. Threat intelligence signals include a single detection on a security blocklist, specifically PhishDestroy, which flagged the domain as malicious. VirusTotal analysis returned 14 positive detections out of 95 scanned vendors, reinforcing the malicious assessment.

The Gridinsoft trust score was recorded as 0 out of 100, and AlienVault OTX listed the domain in one threat‑intelligence pulse. The overall risk rating is elevated, and the campaign’s status is offline, limiting immediate exposure but indicating a recent operational window. Defenders should block the domain at network perimeter and DNS layers, monitor for any residual artifacts such as credential submissions or wallet address lookups linked to the domain, and consider updating detection signatures to include the observed IP, nameservers, and registrar information. Continuous observation of the registrar and Cloudflare‑associated IP ranges is recommended to catch potential re‑use of similar infrastructure in future impersonation attempts.