usdcrw[.]com

The domain usdcrw.com was registered on October 25, 2025 through eName Technology Co.,Ltd. and is currently taken offline. Infrastructure analysis shows it resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS records list the authoritative nameservers rajeev.ns.cloudflare.com and saanvi.ns.cloudflare.com, both under Cloudflare’s control. No TLS certificate is presented for the host, indicating that any content would be delivered over plain HTTP. The page title observed during the brief scan was "USDC," and the site is classified as a wallet/seed phishing campaign targeting the Binance brand.

Detection evidence is strong: the domain appears on two dedicated security blocklists—PhishDestroy and ScamSniffer—demonstrating that multiple anti‑phishing feeds have flagged it. AlienVault OTX includes the domain in one threat‑intelligence pulse, providing additional community corroboration. VirusTotal scans returned 15 positive detections out of 95 security vendors, reinforcing the malicious reputation. Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of confidence in the site’s legitimacy.

Given the confirmed brand impersonation, the elevated risk rating, and the convergence of independent detections, defenders should immediately block dns resolution for usdcrw.com at the network perimeter and add the domain to local blocklists. Continuous monitoring of the authoritative nameservers is advised, as the underlying Cloudflare infrastructure could be reused for future campaigns. If the domain reappears, rapid re‑blocking and investigation of any associated URLs should be prioritized. Additionally, security teams should watch for newly registered domains that share the "usdcrw" pattern or similar naming conventions to pre‑empt further impersonation attempts.