usd-coin[.]me

Analysis of the domain usd-coin.me indicates active brand impersonation targeting Base, a known cryptocurrency platform. Registered on March 1, 2025, through Gname.com Pte. Ltd., the domain resolves to IP 104.21.44.151, hosted on Cloudflare's network (AS13335). The page title 'DeFi-USD Coin' aligns with cryptocurrency-themed scams, and the domain is explicitly classified as a crypto scam in available threat intelligence. Infrastructure analysis reveals the use of Cloudflare nameservers (adam.ns.cloudflare.com, chan.ns.cloudflare.com) and technologies including Vue.js, jsDelivr, Axios, and HTTP/3, which are consistent with modern phishing or scam site deployments.

Detection data shows the domain appears on one security blocklist (PhishDestroy) and is flagged by 2 of 93 security vendors on VirusTotal. AlienVault OTX includes this domain in a threat intelligence pulse, further corroborating its malicious classification. The SSL certificate, issued by Google Trust Services (WE1), is valid but does not mitigate the domain's fraudulent intent. The domain currently returns an HTTP 301 redirect, though the destination remains unconfirmed.

Defenders should prioritize blocking this domain at the DNS and network levels, particularly in environments where Base or cryptocurrency-related services are in use. The Gridinsoft trust score of 0/100 reinforces the high-risk assessment. While the exact mechanics of the scam (e.g., wallet drainer, fake token sale) are not yet analyzed, the combination of brand impersonation, crypto-themed content, and detection by security vendors warrants immediate mitigation. Further monitoring of associated infrastructure, including the Cloudflare IP and nameservers, is recommended to identify related threats.