prdtlaunch[.]com

This domain, prdtlaunch.com, is flagged for brand impersonation targeting Coinbase, a major cryptocurrency exchange platform. Analysis indicates the site masquerades as an official token launch for "PRDT Finance," a fabricated entity designed to deceive users into engaging with fraudulent cryptocurrency offerings. The page title, "PRDT Finance - Official Token Launch," directly mimics legitimate token launch announcements, a common tactic to exploit user trust in established brands. No explicit crypto drainer kit signatures were identified, but the impersonation framework suggests potential credential harvesting or wallet compromise vectors. Infrastructure analysis reveals the domain was registered on February 21, 2024, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.54.129, which is proxied through Cloudflare, obscuring the origin server. Detection metrics show 5 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on three distinct security blocklists. Technologies detected include Node.js and Express for backend operations, alongside HTTP/3 for optimized delivery. The Gridinsoft trust score of 0/100 further corroborates the domain's malicious classification. As of the latest assessment, prdtlaunch.com has been taken offline, likely due to enforcement actions by security providers such as MetaMask, SEAL, and PhishDestroy. However, the residual risk remains elevated due to the domain's recent creation and the registrar's history of hosting fraudulent infrastructure. Users are advised to verify token launch announcements exclusively through official channels and employ browser-based security extensions to block known malicious domains. Organizations should monitor for similar impersonation attempts leveraging the same registrar or IP range, as threat actors may re-deploy the campaign under new domains.