usdsui[.]run

The domain usdsui.run has been identified as posing an elevated risk due to its involvement in brand impersonation. This site specifically targets the brand 'across' by presenting itself as a legitimate platform for buying Sui stablecoin and related financial products. The threat type is brand impersonation, which can lead to financial loss and deceive users into trusting a fraudulent entity.

Technical analysis of usdsui.run reveals several indicators of malicious activity. The domain is currently active and resolves to the IP address 172.67.164.114. It operates under an SSL certificate issued by Let's Encrypt and employs technologies like HSTS, Cloudflare Browser Insights, Cloudflare, and HTTP/3. The domain appears on three security blocklists, specifically flagged by MetaMask, PhishDestroy, and SEAL. On VirusTotal, usdsui.run is flagged by 3 out of 95 security vendors. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and was created on March 07, 2026. The Gridinsoft trust score for this domain is 0/100, further indicating the lack of trustworthiness and potential risk involved.

To mitigate the risks associated with this domain, users are advised to avoid any interactions with the site. Individuals should verify the authenticity of any financial platforms claiming to offer stablecoin or cryptocurrency services, especially those that provide unrealistic returns, such as a 25% APR in staking. Security tools and browser extensions that block known phishing sites should be regularly updated to include the latest threat intelligence. Additionally, users should report any suspicious domains to appropriate security monitoring services to aid in their addition to blocklists. This vigilance can help protect against deceptive activities that exploit trust in well-known brands.