xmr2usdt[.]com

The domain xmr2usdt.com, associated with a generic phishing operation, has a high threat score of 70/100 and is currently down, indicating it has likely been taken down. This domain has been detected as malicious by only 1 out of 95 security vendors, specifically flagged by SOCRadar, and is listed on one public blocklist. Notably, it is not flagged by Google Safe Browsing, which may suggest limited exposure or a recent operational status.

The domain was registered with GoDaddy.com, LLC in the United States on February 21, 2026, and was first seen in the database on January 24, 2026. The hosting IP address is 75.2.60.5. The relatively recent registration and the low detection count indicate that this domain may have been part of a short-lived phishing campaign, with minimal time for security vendors to react and flag it.

The absence of a recognizable brand being impersonated suggests that this operation was likely unbranded, aiming to deceive users without targeting a specific entity. The limited detection by security vendors and the current down status imply that the threat posed by this domain may be mitigated, but it remains relevant for threat intelligence operations.

Given the high threat score and the domain's association with phishing activities, it is advisable to block the domain at the perimeter and submit a report to the registrar's abuse desk for further investigation. Additionally, flagging the hosting IP as an indicator of compromise (IOC) could help in monitoring any future activities associated with this infrastructure.