MALICIOUS — CRITICAL
Verifica phishing e sicurezza per usd100.us
usd100[.]
The domain usd100.us is confirmed as an active brand impersonation phishing site targeting Solana, a prominent blockchain platform.
- VirusTotal
- 15/91
- Blocklists
- No stored match
- Disponibilità
- Ultimo attivo conosciuto · HTTP 302
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
usd100.us — Ultimo attivo conosciuto (HTTP 302). Simulazione del marchio: Solana; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 15/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 1 alert; URLScan malicious verdict; PhishDestroy score 100/100. Registrar: Namecheap.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
The domain usd100.us is confirmed as an active brand impersonation phishing site targeting Solana, a prominent blockchain platform. Analysis indicates the site operates under the guise of a cryptocurrency memecoin offering, using the page title $USD100 - Because $1 Wasn't Enough | Solana Memecoin to lure victims. This domain is classified as high-risk due to its deceptive branding and potential for financial fraud or credential harvesting.
Infrastructure analysis reveals the domain was registered on May 21, 2026, through NAMECHEAP INC, an entity frequently associated with malicious registrations. It resolves to the IP address 185.158.133.1, located in Germany (DE). The domain is flagged by 2 of 95 security vendors on VirusTotal, indicating early detection but limited widespread recognition. It appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services (WE1), a common provider for both legitimate and malicious sites, which does not mitigate the domain's risk.
As of the latest assessment, usd100.us remains active and continues to resolve. Organizations and individuals are advised to block the domain at the DNS or network level to prevent access. Security teams should monitor for related indicators, including the IP address 185.158.133.1 and any associated cryptocurrency wallet addresses promoted on the site. Users should be educated on recognizing brand impersonation tactics, particularly in the cryptocurrency space, and encouraged to verify official project channels before engaging with promotional offers.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | s.geckoterminal.com/_next/static/chunks/bc1a11eb.abbe7d7850b90e8b.js |
audit | Hunting_JS_WebAssembly |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 2 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.