# profitmeme.com — SUSPICIOUS

> PhishDestroy identifies profitmeme.com as a cryptocurrency scam posing as meme coin investment. Registered Sep 17 2025 via Regery.com; still active.

## Summary
PhishDestroy has opened an active investigation into profitmeme.com for its use in cryptocurrency investment scams. The domain was registered on September 17, 2025 and currently resolves to IP address 63.176.8.218. VirusTotal currently shows 0 out of 95 detection engines flagging the domain, indicating it has not yet been widely blacklisted despite its malicious intent. The domain is registered through DEVEXPANSE LTD, operating under the trade name Regery.com, a registrar known for hosting fraudulent cryptocurrency schemes.  This domain presents a significant risk due to its deployment in investment fraud campaigns targeting cryptocurrency enthusiasts. The domain's recent creation date, combined with its lack of detection on VirusTotal, suggests it is either newly activated or employing evasion tactics to avoid immediate detection. The use of Let's Encrypt SSL certificates further lends false legitimacy to the scam, as HTTPS is often misconstrued by users as a trust indicator. No current presence on public blocklists has been observed, which increases the likelihood of continued malicious activity. The domain's IP address, 63.176.8.218, is associated with hosting infrastructure known to support scam operations, particularly those involving cryptocurrency giveaways or fake token launches.  Users are strongly advised to avoid interacting with any content hosted on profitmeme.com, including clicking links, downloading files, or providing cryptocurrency wallet details. Organizations should implement network-level blocking of the domain and IP address (63.176.8.218) to prevent access from corporate environments. If exposure occurs, users should disconnect from the network immediately, scan for malware, and report the incident to their financial institutions and relevant cybercrime units. Continuous monitoring of this domain is recommended due to the high risk of escalation in cryptocurrency-based phishing campaigns. Security teams should prioritize this threat as it evolves, given the domain’s active status and low initial detection rates.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-09-17 17:06:57
- Registrar: DEVEXPANSE LTD d/b/a Regery.com
- IP: 63.176.8.218

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/228daca7-93e1-4cfe-837d-06de20c951f1
- PhishDestroy: https://phishdestroy.io/domain/profitmeme.com/
- LLM endpoint: https://phishdestroy.io/domain/profitmeme.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/profitmeme.com/
Last updated: 2026-03-21