secureusdt[.]in

The domain www.secureusdt.in was registered on July 12, 2025 through GoDaddy and is hosted on infrastructure owned by Amazon (AS16509) with the IP address 216.198.79.1 located in the United States. DNS resolution is provided by GoDaddy’s nameservers ns37.domaincontrol.com and ns38.domaincontrol.com. The site serves HTTP 200 responses and presents a TLS certificate issued by Let’s Encrypt (R12), indicating the presence of HSTS. Technical fingerprints show the use of Vercel as the web‑application platform. The page title observed is “Official USDT Verification - BNB Smart Chain”, and the campaign is classified as brand impersonation targeting Binance. The domain is currently listed on one security blocklist and has been flagged by PhishDestroy. A Gridinsoft trust score of 0/100 further underscores its malicious posture. While the site’s content has not been dissected, the combination of a Binance‑related title, legitimate‑looking TLS, and Vercel hosting is consistent with credential‑harvesting attempts. Defenders should block resolution of www.secureusdt.in, monitor outbound traffic to 216.198.79.1, and update detection rules to flag any HTTP requests bearing the observed page title or similar Binance‑related terminology. Ongoing observation is advised to capture any evolution of the payload or additional infrastructure components.