# getusd1.online — SUSPICIOUS

> getusd1.online is a phishing domain created on March 19, 2026. It attempts to steal user credentials. Avoid this dangerous site!

## Summary
PhishDestroy identifies getusd1.online as a phishing domain. This site likely impersonates a cryptocurrency or financial service to steal user credentials or conduct fraudulent transactions. The domain does not appear to leverage a known drainer kit, but users should exercise extreme caution.  Technical indicators for getusd1.online include a VirusTotal score of 2/95, indicating some level of detection. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 188.114.96.3. The domain's SSL certificate is provided by Let's Encrypt. It also appears on 1 security blocklist and is blocked by ScamSniffer.  Currently, getusd1.online is active. Users are strongly advised to avoid interacting with this domain or providing any personal information. Given the risk, security teams should continue monitoring this domain and consider adding it to additional blocklists. The domain poses a significant phishing threat.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-19 18:40:07
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a84c496f-8926-4fb9-86ac-c879995b5bff
- PhishDestroy: https://phishdestroy.io/domain/getusd1.online/
- LLM endpoint: https://phishdestroy.io/domain/getusd1.online/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/getusd1.online/
Last updated: 2026-03-27