# usdtflashsoftwares.online USDT flash demo license page | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/usdtflashsoftwares.online/
Machine-readable companion: https://phishdestroy.io/domain/usdtflashsoftwares.online/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-11-01 06:03:52 UTC
- Last availability or vendor check: 2026-11-01 06:03:52 UTC
- Stored record updated: 2026-11-01 07:45:09 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 13.140.163.172
- Registrar in stored WHOIS data: GoDaddy.com, LLC
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-29 17:27:11 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a195b3-2adc-7381-a0f0-dc9483bb1e4c/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/usdtflashsoftwares.online
- Certificate Transparency search: https://crt.sh/?q=%25.usdtflashsoftwares.online
- Web Archive lookup: https://web.archive.org/web/*/https://usdtflashsoftwares.online/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records the usdtflashsoftwares.online landing page offering a USDT flash software license and a $19 demo.

The captured landing page of usdtflashsoftwares.online presents itself as a store for USDT flash software, with a headline promising that users can buy the software in one minute and send flash USDT on TRC20 or ERC20 to any wallet. The main interaction is a pair of buttons labeled "Take a license" and "Open the $19 demo," which invite the visitor to start a purchase or open the demo, while a top bar states the store is open 24/7.

The stored VirusTotal domain result reports 1 detection out of 92 engines. CRDF reported "malicious".
Package revision: 27022cc995f5aec0fd4f81dd1e4bfde8ce21ec81d924417ece2475dccaca1ba9
Text generated (not scan time): 2026-11-01 07:45:38
Reviewed evidence snapshot: {"domain":"usdtflashsoftwares.online","screenshot_available":true,"page_title":"usdt flash demo license | usdtflashsoftwares.online","original_meta_description":"usdt flash demo license on usdtflashsoftwares.online. ribbon-rail $19 demo license walkthrough. Demo $19, Pro $2,500, Lifetime $3,000. TRC20 and ERC20. Help +","initial_ai_description":"The website promotes and sells 'USDT Flash Software' which claims to generate and send 'flash USDT' (Tether) on TRC20 and ERC20 networks. This is a known cryptocurrency scam where users are led to believe they can create fake cryptocurrency that appears in wallets, often for a fee, but the 'flash' tokens are not real and cannot be transacted. The site offers a '$19 demo' and various 'flash USDT' tools, which are typical tactics of such scams.","metadata_observed_on":"2026-11-01","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":1,"engines":92,"malicious":1,"suspicious":0,"retrieved_date":"2026-11-01","analysis_date":"2026-10-31","flagging_vendors":["CRDF"],"vendor_labels":{"CRDF":"malicious"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-01T06:41:54Z","final_host":"usdtflashsoftwares.online","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 1 detection out of 92 engines. CRDF reported \"malicious\".","page_paragraph_target_characters":547}
Source facts (timestamps as stored): {"record_id":1727669,"first_recorded_at":"2026-11-01 07:03:52","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":1,"denominator":92,"malicious":1,"suspicious":0,"vendors":{"CRDF":"malicious"},"observed_at":"2026-10-31T15:34:27Z","checked_at":"2026-11-01 07:40:46","fetched_at":"2026-11-01T06:40:34Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":1,"denominator":92,"malicious":null,"suspicious":null,"vendors":["CRDF"],"observed_at":"2026-10-31 15:34:27","checked_at":"2026-11-01 07:40:46","fetched_at":"2026-11-01 06:40:47","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-01 07:41:02"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_PHISH","checked_at":"2026-11-01 08:30:21"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-01 07:03:52"}}

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a195b3-2adc-7381-a0f0-dc9483bb1e4c.png
  Captured: 2026-11-01 06:03:52 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a195b3-2adc-7381-a0f0-dc9483bb1e4c.png
  Captured: 2026-11-01 06:03:52 UTC
  Source report: https://urlscan.io/result/01a195b3-2adc-7381-a0f0-dc9483bb1e4c/
- URLScan · 2026-11-01: https://screenshots.phishdestroy.io/us/01a195b4-1ec7-7568-820d-7cebf593abfc.png
  Captured: 2026-11-01 06:02:58 UTC
  Source report: https://urlscan.io/result/01a195b4-1ec7-7568-820d-7cebf593abfc/
  SHA-256: 0e9a5bec64451ff7e9d7236d1e1ecd67678718d07d595e6caab21b595afb4c29
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ce07b699-70ce-45d3-b336-6e63ca882739.png
  Captured: 2026-11-01 06:41:54 UTC
  Source report: https://radar.cloudflare.com/scan/ce07b699-70ce-45d3-b336-6e63ca882739
  SHA-256: c36d184e7ac5a7997100bd2de7ad17f3b25cf30b42e875c01ce16d98ea26773a

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-01T06:44:59Z",
        "uuid": "01a195b3-2adc-7381-a0f0-dc9483bb1e4c",
        "scanned_at": "2026-11-01T06:01:56Z",
        "final_url": "https://usdtflashsoftwares.online/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://usdtflashsoftwares.online/",
                "from": "http://usdtflashsoftwares.online/",
                "status": 307
            }
        ],
        "ip": "13.140.163.172",
        "ptr": "vmi3594603.contaboserver.net",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.110.94",
            "2a00:1450:4001:c1f::5f",
            "13.140.163.172"
        ],
        "asns": [
            "15169",
            "51167"
        ],
        "countries": [
            "US",
            "DE",
            "FR"
        ],
        "link_domains": [
            "wa.me",
            "signal.me",
            "tronscan.org",
            "etherscan.io"
        ],
        "social": [
            "https://wa.me/16462369686"
        ],
        "doc_hash": "9e067fcf3f8cf5989ab27d8bd20632de66d30ecaf59277853244dc69d9cabbd5",
        "script_hashes": [
            "2bfb803948b5ad6ee678b827d916a1c5e54e0bffd22ac23fc55a1c74295f0ce2",
            "682c01fe889cd286b3b897b2a066dfe75f29cf208e308b0d65be79ad5d85e790",
            "e6c1a1df8ddb03be152ec81eddcde50cbc2c5e1baf918ad8767412732dff09d6",
            "134ed28c468e67fe6fdd31fd96470aa049d311ffd11b7c8294c89fd4dbeb96f8",
            "1ea012b37e4f0e6c2f8a3fa0035589c0ce1d0a1d84dfc172534274c536f246a8",
            "8e7f64a2ae78c12b62db1c02697b8920209e2076b77753195cd80fa2d927d1a7",
            "c177e8c4ed47187ab853a39d2ca56cf588593e34445f97984e0452df827d6f64"
        ],
        "globals": [
            "injectGlobalSeo",
            "loadLayout",
            "injectBreadcrumbSchema",
            "loadSiteScripts",
            "initMobileMenu",
            "initStickyHeader",
            "initHeroSlider",
            "initPricingToggle",
            "initTestimonials",
            "initScrollAnimations",
            "initMotionOrbs",
            "initParallaxSoft",
            "initContactForm",
            "initFaq",
            "initScrollProgress",
            "initRevealVariants",
            "initCounters",
            "initHeroParticles",
            "initPointerEffects",
            "initRipples",
            "initSiteTranslator",
            "REDUCED_MOTION",
            "FINE_POINTER"
        ],
        "tls": {
            "san": [
                "usdtflashsoftwares.online",
                "www.usdtflashsoftwares.online"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "YE1",
            "subject": "usdtflashsoftwares.online",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-28T18:46:26Z",
            "valid_from": "2026-10-30T18:46:27Z"
        },
        "domain_age_days": 1,
        "apex_age_days": 1,
        "tls_age_days": 1,
        "tls_valid_days": 89,
        "requests": 42,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-11-01T06:45:01Z",
        "uuid": "ce07b699-70ce-45d3-b336-6e63ca882739",
        "scanned_at": "2026-11-01T06:41:54Z",
        "final_url": "https://usdtflashsoftwares.online/",
        "status": 200,
        "history": [
            {
                "url": "https://usdtflashsoftwares.online/",
                "status": 200
            }
        ],
        "dom_hash": "3ea3ea97d4e929b6efa160102529e5c7415832d360d23e1bf230870e671a856b",
        "doc_hash": "9e067fcf3f8cf5989ab27d8bd20632de66d30ecaf59277853244dc69d9cabbd5",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "usdtflashsoftwares.online",
                "type": "A",
                "value": "13.140.163.172"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.7",
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2026-10-29T18:27:11Z",
            "updated": "2026-10-29T18:27:12Z",
            "expires": "2027-10-29T18:27:11Z",
            "nameservers": [
                "ns08.domaincontrol.com",
                "ns07.domaincontrol.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-01T06:40:34Z",
        "analysis_at": "2026-10-31T15:34:27Z",
        "stats": {
            "timeout": 0,
            "harmless": 52,
            "malicious": 1,
            "suspicious": 0,
            "undetected": 39
        },
        "detections": {
            "CRDF": "malicious"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "first_seen": "2026-10-30T21:24:13Z",
        "dns": [
            {
                "ttl": 600,
                "type": "A",
                "value": "13.140.163.172"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns08.domaincontrol.com"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns07.domaincontrol.com"
            },
            {
                "ttl": 3600,
                "type": "SOA",
                "rname": "dns.jomax.net",
                "value": "ns07.domaincontrol.com"
            }
        ],
        "dns_at": "2026-10-31T15:41:57Z",
        "jarm": "28d28d28d00028d00042d42d000000e1ea2a807a629b496b664cf07ad7c08d",
        "cert": {
            "san": [
                "usdtflashsoftwares.online",
                "www.usdtflashsoftwares.online"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "6ff0f735c25c6593b48a2cbc8ec9756552f",
            "sha256": "9f1658972dc2d9bad5aea36c9a45432e47cb4b2da637994b4e5102faf45fd9a1",
            "subject": "usdtflashsoftwares.online",
            "valid_to": "2027-01-28T18:46:26Z",
            "valid_from": "2026-10-30T18:46:27Z"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "client renew prohibited",
                "client update prohibited",
                "client delete prohibited",
                "add period"
            ],
            "events": {
                "expiration": "2027-10-29T18:27:11Z",
                "last changed": "2026-10-29T18:27:12Z",
                "registration": "2026-10-29T18:27:11Z",
                "last update of RDAP database": "2026-10-30T21:24:16Z"
            },
            "registrar": "GoDaddy.com, LLC",
            "registrar_iana_id": "146"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-01T06:16:07Z",
        "mail_config": {
            "dmarc": true,
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "usdtflashsoftwares.online"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-11-01T06:04:25Z",
            "first": "2026-11-01T06:04:25Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 32805
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "llms_txt": true,
            "sitemaps": [
                "https://usdtflashsoftwares.online/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 30
        },
        "security_txt": {
            "present": true,
            "found_in": "/.well-known/security.txt"
        },
        "social_tags": {
            "ogUrl": "https://usdtflashsoftwares.online/",
            "title": "usdt flash demo license | usdtflashsoftwares.online",
            "author": "usdtflashsoftwares.online",
            "ogType": "website",
            "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
            "ogImage": "https://usdtflashsoftwares.online/og-image.jpg",
            "ogTitle": "usdt flash demo license | usdtflashsoftwares.online",
            "keywords": "usdtflashsoftwares.online, usdtflashsoftwares.online, tetherflash, Tether Flash, flash USDT store, buy USDT flash software, USDT flash shop, Tether Flash USDT, tether flash software, Tether flasher, buy flash USDT online, flash USDT, USDT flash, USDT flash software, flash USDT software, USDT flasher",
            "ogSiteName": "usdtflashsoftwares.online",
            "themeColor": "#111111",
            "description": "usdt flash demo license on usdtflashsoftwares.online. ribbon-rail $19 demo license walkthrough. Demo $19, Pro $2,500, Lifetime $3,000. TRC20 and ERC20. Help +",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://usdtflashsoftwares.online/",
            "ogDescription": "usdt flash demo license on usdtflashsoftwares.online. ribbon-rail $19 demo license walkthrough. Demo $19, Pro $2,500, Lifetime $3,000. TRC20 and ERC20. Help +"
        },
        "trackers": {
            "requests": 33,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 5
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 51,
                "tls": 28,
                "wait": 18,
                "connect": 19,
                "download": 121
            },
            "response_ms": 237
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 130946,
            "co2_grams": 0.0048,
            "cleaner_than": 16
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.201.71.4",
                    "host": "ns08.domaincontrol.com"
                },
                {
                    "ip": "97.74.103.4",
                    "host": "ns07.domaincontrol.com"
                }
            ],
            "zone": "usdtflashsoftwares.online"
        },
        "location": {
            "ip": "13.140.163.172",
            "asn": "51167",
            "org": "Contabo GmbH",
            "city": "Lauterbourg",
            "country": "FR"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "usdtflashsoftwares.online"
        },
        "dns": {
            "A": [
                "13.140.163.172"
            ],
            "NS": [
                "ns07.domaincontrol.com",
                "ns08.domaincontrol.com"
            ],
            "SOA": "{\"nsname\": \"ns07.domaincontrol.com\", \"hostmaster\": \"dns.jomax.net\", \"serial\": 2026103000, \"refresh\": 28800, \"retry\": 7200, \"expire\": 604800, \"minttl\": 600}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "13.140.163.172",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://usdtflashsoftwares.online"
            ]
        },
        "linked_pages": {
            "external": [
                "https://wa.me/16462369686",
                "https://signal.me/"
            ],
            "external_count": 2,
            "internal_count": 36
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2026-10-29T18:27:11Z",
            "updated": "2026-10-29T18:27:12Z",
            "expires": "2027-10-29T18:27:11Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp",
                "clientRenewProhibited https://icann.org/epp",
                "clientUpdateProhibited https://icann.org/epp",
                "clientDeleteProhibited https://icann.org/epp",
                "addPeriod https://icann.org/epp"
            ],
            "nameservers": [
                "ns08.domaincontrol.com",
                "ns07.domaincontrol.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html"
            }
        }
    }
}
```