usdtaml[.]live

This domain, usdtaml.live, is a fraudulent website designed to impersonate Bybit, a legitimate cryptocurrency exchange. The site displays the page title 'Bybit Audit,' suggesting it targets users attempting to verify account balances or transaction histories. By mimicking official audit tools, the domain likely aims to harvest login credentials, two-factor authentication codes, or other sensitive financial data from unsuspecting victims. The threat level is elevated due to its convincing branding and targeted deception tactics. Analysis indicates the domain was registered on October 24, 2025, through GoDaddy.com, LLC, and currently resolves to the IP address 35.157.26.135. Security vendors on VirusTotal flagged the domain as malicious, with 5 out of 95 engines detecting it. Additionally, it appears on one security blocklist, and its Gridinsoft trust score is 0/100, further confirming its malicious nature. The domain was taken offline, but its infrastructure remains a documented indicator of compromise. If you visited usdtaml.live, immediately cease all interaction with the site. Change passwords for any accounts accessed while the domain was open, particularly cryptocurrency exchange credentials. Enable multi-factor authentication if not already active. Monitor financial accounts for unauthorized transactions and report any suspicious activity to the platform’s official support channels. Consider running a full system scan using updated security tools to detect potential malware or backdoors installed during the visit.