americatoken[.]live

Analysis of the domain americatoken.live shows it is currently active and configured for brand‑impersonation phishing. The domain was registered on June 07, 2026 through Dynadot Inc and resolves to the IPv4 address 165.99.164.20, which is hosted in the United States under ASN 213549 (SATISFYHOST LTD). Authoritative name servers are dns1.harmonweb.net and dns2.harmonweb.net. The web server presents a TLS certificate issued by Let’s Encrypt (YR1) and advertises LiteSpeed with HTTP/3 support. An HTTP request returns a 200 status and the page title reads “America250 ($AMERICA250) | Official Semiquincentennial Meme Coin on Solana | 1776–2026”, indicating a purported cryptocurrency offering tied to a historical theme. The site has been listed on one security blocklist and is flagged by PhishDestroy, reinforcing the suspicion of malicious intent. VirusTotal reports that the domain was scanned by 91 vendors with no detections at the time of analysis, though the absence of detections does not confirm benign behavior. Current evidence points to a brand‑impersonation campaign, but the exact content and any credential‑harvesting mechanisms have not been publicly observed. Defenders should consider adding the domain to block lists, monitor DNS queries for the associated IP, and inspect any outbound traffic to the host for anomalous activity. Continuous re‑evaluation is advised as additional indicators may emerge.