app-joinopenstandard[.]top

This domain, app-joinopenstandard.top, is flagged as an active cryptocurrency phishing site targeting users of the Open USD (OUSD) stablecoin. The site impersonates the legitimate Open Standard project, likely aiming to deceive victims into disclosing wallet credentials or transferring funds under false pretenses. Analysis indicates the domain remains operational and continues to host fraudulent content. Infrastructure analysis reveals the domain was registered on July 01, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 104.21.74.199 and is secured with an SSL certificate issued by Google Trust Services. Detection metrics show minimal but concerning flags: only 1 of 95 security vendors on VirusTotal have identified the domain as malicious. Additionally, the domain appears in a single threat intelligence pulse on AlienVault OTX, suggesting limited but existing awareness within the security community. The site remains active and poses a high risk to users unfamiliar with legitimate Open USD infrastructure. Organizations and individuals are advised to block the domain at the network level and add its IP address to firewall deny lists. End users should be educated on verifying official project domains and avoiding unsolicited cryptocurrency offers. Security teams are encouraged to monitor for related domains using similar naming conventions, particularly those incorporating 'openstandard' or 'joinopen' patterns.