usdt-eth88[.]com

The domain usdt-eth88.com was registered through Gname.com Pte. Ltd. on December 07, 2025. According to the current intelligence, it is flagged as a high‑risk crypto phishing site (generic_phishing) and remains active as of July 12, 2026. The page title returned by the server is “Verification”, which aligns with the advertised intent to collect user credentials under the pretense of confirming crypto wallet information.

Infrastructure analysis shows the domain resolves to the IP address 172.67.144.203, which belongs to the Cloudflare network (AS13335). Authoritative name servers are julio.ns.cloudflare.com and marge.ns.cloudflare.com, indicating the domain is fully proxied behind Cloudflare’s edge. The web service reports HTTP/3 support and loads the jQuery library, while the TLS certificate is issued by Google Trust Services (entity WE1) and is currently valid. Geolocation of the IP places the server in the United States.

Reputation data is uniformly negative: Gridinsoft assigns a trust score of 0 / 100, and the domain appears on a single blocklist (PhishDestroy). VirusTotal analysis shows that 2 out of 95 security vendors have flagged the domain, reinforcing the phishing classification. An HTTP 403 response is observed, suggesting that direct access is blocked or restricted, but the presence of a “Verification” page title indicates that the site is designed to lure users into submitting sensitive information.

Defenders should add usdt-eth88.com to outgoing and incoming web filtering rules, and ensure DNS sinks or blocklists are updated to include both the domain and its associated Cloudflare name servers. Monitoring of connections to 172.67.144.203 for anomalous traffic patterns is advisable, as Cloudflare may host additional malicious sub‑domains. Incident response teams should treat any credential or wallet address submissions originating from this domain as compromised and advise affected users to rotate credentials and verify wallet activity.