usdt[.]today

On July 24, 2026, analysis of the domain usdt.today shows it was registered on February 21, 2026 through Cloudflare, Inc. The domain resolves to IP 185.158.133.1, an address owned by Cloudflare (AS13335) located in Poland. The name servers are tina.ns.cloudflare.com and rene.ns.cloudflare.com, confirming the use of Cloudflare's DNS infrastructure. The site returns HTTP 200 and presents the page title “USD₮ | Today”. TLS is provided by a Let's Encrypt certificate identified as E8, and the site enforces HSTS. Google Analytics scripts are detected, indicating tracking capabilities.

Security telemetry indicates the domain is currently listed on a single blocklist and has been actively blocked by the PhishDestroy service. The Gridinsoft trust score is 0 out of 100, reflecting a lack of trust. VirusTotal analysis reports that one of ninety‑three scanned security vendors flagged the domain, reinforcing the suspicion of malicious activity. The overall detection profile, combined with the generic phishing classification, suggests that the site is being used to lure victims, likely targeting users interested in USDT or other digital assets.

Uncertainties remain regarding the exact phishing payload, the specific victim lures, and the presence of any credential‑stealing forms, as no visual inspection of the page content is available. Defenders should update filtering rules to block or redirect traffic to usdt.today, add the IP 185.158.133.1 to deny lists, and monitor for any related DNS queries. Continuous re‑scanning with multi‑engine services is advised to capture evolving detection counts. Organizations handling cryptocurrency transactions should educate users about the risk of unsolicited links referencing USDT and enforce multi‑factor authentication to mitigate credential compromise.