# usdmarket.la — SUSPICIOUS

> PhishDestroy identifies usdmarket.la as an active crypto drainer domain. Only 1 out of 95 VirusTotal scanners detected it.

## Summary
PhishDestroy identifies usdmarket.la as an active threat leveraging crypto drainer tactics. This domain is assessed at an elevated risk level due to its recent creation, low detection rates, and association with cryptocurrency impersonation schemes targeting unsuspecting users.

This domain was flagged with a 1/95 detection ratio on VirusTotal as of the investigation date, indicating extremely low coverage by security vendors. It was registered on March 15, 2026, through Key-Systems GmbH, and resolves to the IP address 104.21.47.66. The SSL certificate is issued by Let’s Encrypt, suggesting an attempt to appear legitimate through standard web encryption practices. However, given the domain’s recent registration and minimal detection, this domain should be treated with high caution. No additional blocklist or trust score data was available at the time of analysis, reinforcing the need for manual verification.

Mitigation steps for users include avoiding clicking on links to usdmarket.la, removing any browser extensions that may interact with cryptocurrency sites, and clearing cached credentials and cookies to prevent unauthorized access. If interaction with cryptocurrency platforms is necessary, navigate directly to official websites via verified, secure channels and avoid interacting with unsolicited links or advertisements. Organizations should monitor network traffic for connections to this IP (104.21.47.66) and block access where appropriate.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-15 18:20:55
- Registrar: Key-Systems GmbH
- IP: 104.21.47.66

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/76a8c210-e258-4701-9fd0-8cbf16d62230
- PhishDestroy: https://phishdestroy.io/domain/usdmarket.la/
- LLM endpoint: https://phishdestroy.io/domain/usdmarket.la/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/usdmarket.la/
Last updated: 2026-03-21