usenst[.]xyz

The domain usenst.xyz has been identified as a brand impersonation threat, specifically targeting Compound, a well-known decentralized finance protocol. As of the latest analysis, this domain has been taken down, but its recent activity poses significant risks to users who may have encountered it. The site operated under the title 'The MetaDEX that grows HYPE,' which is a deceptive attempt to lure cryptocurrency enthusiasts by mimicking Compound's branding and services.

Technical indicators reveal that usenst.xyz was created on November 26, 2025, and registered through Dynadot LLC, a common registrar for suspicious domains. It resolves to the IP address 172.67.135.138 and uses a Let's Encrypt SSL certificate (R13), which provides a false sense of security. VirusTotal data shows that 2 out of 95 security vendors flagged this domain as malicious, and it appears on 3 security blocklists. These metrics, combined with the domain's recent creation and impersonation of a prominent brand, suggest a high likelihood of fraudulent intent.

Given the elevated risk level and confirmed impersonation, users should avoid visiting usenst.xyz or interacting with any content associated with it. If you have already accessed the site, do not enter any personal or financial information, and consider running a security scan on your device. The domain's takedown status indicates that action has been taken, but similar threats may emerge. Always verify URLs directly through official channels and use trusted security tools to check for phishing indicators.