# usdtflashsoftwares.store USDT flash software landing page | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/usdtflashsoftwares.store/
Machine-readable companion: https://phishdestroy.io/domain/usdtflashsoftwares.store/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-11-01 05:46:45 UTC
- Last availability or vendor check: 2026-11-01 05:46:45 UTC
- Stored record updated: 2026-11-01 07:30:21 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 13.140.163.172
- Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-29 17:27:11 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a195a4-57dc-706d-8167-fd222427deaf/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/usdtflashsoftwares.store
- Certificate Transparency search: https://crt.sh/?q=%25.usdtflashsoftwares.store
- Web Archive lookup: https://web.archive.org/web/*/https://usdtflashsoftwares.store/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records the usdtflashsoftwares.store landing page, which offers USDT flash software and a $19 demo option.

The captured landing page of usdtflashsoftwares.store presents itself as a store selling USDT flash software, with a headline naming the domain and a line stating that buyers can send flash USDT on TRC20 or ERC20 to any wallet. The main interaction is a pair of buttons, one labeled "Pick this stair" and another offering a $19 demo, alongside a floating order card reading "Order TS-48210, Lifetime plan - key sent" and contact buttons for chat and WhatsApp.

The stored VirusTotal domain result reports 1 detection out of 92 engines. CRDF reported "malicious".
Package revision: 8739d8c7bc15dc1471eeea2b79762dfd7d80c1b23d1bb81799344ab37f8ebcc4
Text generated (not scan time): 2026-11-01 06:48:45
Reviewed evidence snapshot: {"domain":"usdtflashsoftwares.store","screenshot_available":true,"page_title":"affordable usdt flash key | usdtflashsoftwares.store","original_meta_description":"affordable usdt flash key on usdtflashsoftwares.store. stair-cascade affordable USDT flash keys. Demo $19, Pro $2,500, Lifetime $3,000. TRC20 and ERC20. Help","initial_ai_description":"The site promotes and sells 'USDT flash software' which is a known scam promising to generate fake Tether (USDT) that can be used for fraudulent purposes. The page content explicitly describes this functionality.","metadata_observed_on":"2026-11-01","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":1,"engines":92,"malicious":1,"suspicious":0,"retrieved_date":"2026-11-01","analysis_date":"2026-10-31","flagging_vendors":["CRDF"],"vendor_labels":{"CRDF":"malicious"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-01T05:47:10Z","final_host":"usdtflashsoftwares.store","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 1 detection out of 92 engines. CRDF reported \"malicious\".","page_paragraph_target_characters":547}
Source facts (timestamps as stored): {"record_id":1727593,"first_recorded_at":"2026-11-01 06:46:45","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":1,"denominator":92,"malicious":1,"suspicious":0,"vendors":{"CRDF":"malicious"},"observed_at":"2026-10-31T15:42:38Z","checked_at":"2026-11-01 06:47:03","fetched_at":"2026-11-01T05:47:02Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":1,"denominator":92,"malicious":null,"suspicious":null,"vendors":["CRDF"],"observed_at":"2026-10-31 15:42:38","checked_at":"2026-11-01 06:47:03","fetched_at":"2026-11-01 05:47:03","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-01 06:47:06"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_PHISH","checked_at":"2026-11-01 08:30:21"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-01 06:46:45"}}

## Stored page captures

- Primary capture: https://i.ibb.co/VcXKDSbJ/443b26f654b1.png
  Captured: 2026-11-01 05:46:45 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a195a4-57dc-706d-8167-fd222427deaf.png
  Captured: 2026-11-01 05:46:45 UTC
  Source report: https://urlscan.io/result/01a195a4-57dc-706d-8167-fd222427deaf/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/85a845e7-cb22-4b9a-a552-5fc7fb4f7715.png
  Captured: 2026-11-01 05:47:10 UTC
  Source report: https://radar.cloudflare.com/scan/85a845e7-cb22-4b9a-a552-5fc7fb4f7715
  SHA-256: c2943dc017fb74a7e0c9c81309b63bb905d59580289d270da528bf5bf13a43a0

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-01T05:47:43Z",
        "uuid": "01a195a4-57dc-706d-8167-fd222427deaf",
        "scanned_at": "2026-11-01T05:45:46Z",
        "final_url": "https://usdtflashsoftwares.store/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://usdtflashsoftwares.store/",
                "from": "http://usdtflashsoftwares.store/",
                "status": 307
            }
        ],
        "ip": "13.140.163.172",
        "ptr": "vmi3594603.contaboserver.net",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.20.94",
            "2a00:1450:4001:c25::5f",
            "13.140.163.172"
        ],
        "asns": [
            "15169",
            "51167"
        ],
        "countries": [
            "US",
            "DE",
            "FR"
        ],
        "link_domains": [
            "wa.me",
            "signal.me",
            "tronscan.org",
            "etherscan.io"
        ],
        "social": [
            "https://wa.me/16462369686"
        ],
        "doc_hash": "8bdbf5a23f0e4e998c471a230098d4fded4892d2d7731e08a66e397a2f9b9152",
        "script_hashes": [
            "2bfb803948b5ad6ee678b827d916a1c5e54e0bffd22ac23fc55a1c74295f0ce2",
            "ad42b4d6533a964ce8a483c341e74a4885c18cbe89a4e434b2e81dc84154e09d",
            "e6c1a1df8ddb03be152ec81eddcde50cbc2c5e1baf918ad8767412732dff09d6",
            "134ed28c468e67fe6fdd31fd96470aa049d311ffd11b7c8294c89fd4dbeb96f8",
            "b8dfae8e36fdb35863aac23de774a865ba33e982a3d58441b6bfa3fef65762a8",
            "8e7f64a2ae78c12b62db1c02697b8920209e2076b77753195cd80fa2d927d1a7",
            "c177e8c4ed47187ab853a39d2ca56cf588593e34445f97984e0452df827d6f64"
        ],
        "globals": [
            "injectGlobalSeo",
            "loadLayout",
            "injectBreadcrumbSchema",
            "loadSiteScripts",
            "initMobileMenu",
            "initStickyHeader",
            "initHeroSlider",
            "initPricingToggle",
            "initTestimonials",
            "initScrollAnimations",
            "initMotionOrbs",
            "initParallaxSoft",
            "initContactForm",
            "initFaq",
            "initScrollProgress",
            "initRevealVariants",
            "initCounters",
            "initHeroParticles",
            "initPointerEffects",
            "initRipples",
            "initSiteTranslator",
            "REDUCED_MOTION",
            "FINE_POINTER"
        ],
        "tls": {
            "san": [
                "usdtflashsoftwares.store",
                "www.usdtflashsoftwares.store"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "YE1",
            "subject": "usdtflashsoftwares.store",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-28T19:07:39Z",
            "valid_from": "2026-10-30T19:07:40Z"
        },
        "domain_age_days": 1,
        "apex_age_days": 1,
        "tls_age_days": 1,
        "tls_valid_days": 89,
        "requests": 42,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-11-01T05:47:45Z",
        "uuid": "85a845e7-cb22-4b9a-a552-5fc7fb4f7715",
        "scanned_at": "2026-11-01T05:47:10Z",
        "final_url": "https://usdtflashsoftwares.store/",
        "status": 200,
        "history": [
            {
                "url": "https://usdtflashsoftwares.store/",
                "status": 200
            }
        ],
        "dom_hash": "3ea3ea97d4e929b6efa160102529e5c7415832d360d23e1bf230870e671a856b",
        "doc_hash": "8bdbf5a23f0e4e998c471a230098d4fded4892d2d7731e08a66e397a2f9b9152",
        "domain_risks": [
            "New Domains",
            "Security Risks",
            "Newly Seen Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "usdtflashsoftwares.store",
                "type": "A",
                "value": "13.140.163.172"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.11",
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2026-10-29T18:27:11Z",
            "updated": "2026-10-29T18:27:12Z",
            "expires": "2027-10-29T18:27:11Z",
            "nameservers": [
                "ns05.domaincontrol.com",
                "ns06.domaincontrol.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-01T05:47:02Z",
        "analysis_at": "2026-10-31T15:42:38Z",
        "stats": {
            "timeout": 0,
            "harmless": 52,
            "malicious": 1,
            "suspicious": 0,
            "undetected": 39
        },
        "detections": {
            "CRDF": "malicious"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "first_seen": "2026-10-31T06:20:21Z",
        "dns": [
            {
                "ttl": 600,
                "type": "A",
                "value": "13.140.163.172"
            },
            {
                "ttl": 3600,
                "type": "SOA",
                "rname": "dns.jomax.net",
                "value": "ns05.domaincontrol.com"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns05.domaincontrol.com"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns06.domaincontrol.com"
            }
        ],
        "dns_at": "2026-10-31T15:52:57Z",
        "jarm": "28d28d28d00028d00042d42d000000e1ea2a807a629b496b664cf07ad7c08d",
        "cert": {
            "san": [
                "usdtflashsoftwares.store",
                "www.usdtflashsoftwares.store"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "6058be3e3026e07f8b9603b0410daf4aace",
            "sha256": "239eaf95b58857b0d1b090f817424069a6c72e4daf48154a8ceadce965406bad",
            "subject": "usdtflashsoftwares.store",
            "valid_to": "2027-01-28T19:07:39Z",
            "valid_from": "2026-10-30T19:07:40Z"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client update prohibited",
                "client transfer prohibited",
                "client renew prohibited",
                "add period"
            ],
            "events": {
                "expiration": "2027-10-29T18:27:11Z",
                "last changed": "2026-10-29T18:27:12Z",
                "registration": "2026-10-29T18:27:11Z",
                "last update of RDAP database": "2026-10-31T06:20:11Z"
            },
            "registrar": "GoDaddy.com, LLC",
            "registrar_iana_id": "146"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-01T05:48:07Z",
        "mail_config": {
            "dmarc": true,
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "usdtflashsoftwares.store"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-11-01T05:47:20Z",
            "first": "2026-11-01T05:47:20Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 32785
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "llms_txt": true,
            "sitemaps": [
                "https://usdtflashsoftwares.store/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 30
        },
        "security_txt": {
            "present": true,
            "found_in": "/.well-known/security.txt"
        },
        "social_tags": {
            "ogUrl": "https://usdtflashsoftwares.store/",
            "title": "affordable usdt flash key | usdtflashsoftwares.store",
            "author": "usdtflashsoftwares.store",
            "ogType": "website",
            "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
            "ogImage": "https://usdtflashsoftwares.store/og-image.jpg",
            "ogTitle": "affordable usdt flash key | usdtflashsoftwares.store",
            "keywords": "usdtflashsoftwares.store, usdtflashsoftwares.store, tetherflash, Tether Flash, flash USDT store, buy USDT flash software, USDT flash shop, Tether Flash USDT, tether flash software, Tether flasher, buy flash USDT online, flash USDT, USDT flash, USDT flash software, flash USDT software, USDT flasher,",
            "ogSiteName": "usdtflashsoftwares.store",
            "themeColor": "#111111",
            "description": "affordable usdt flash key on usdtflashsoftwares.store. stair-cascade affordable USDT flash keys. Demo $19, Pro $2,500, Lifetime $3,000. TRC20 and ERC20. Help",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://usdtflashsoftwares.store/",
            "ogDescription": "affordable usdt flash key on usdtflashsoftwares.store. stair-cascade affordable USDT flash keys. Demo $19, Pro $2,500, Lifetime $3,000. TRC20 and ERC20. Help"
        },
        "trackers": {
            "requests": 33,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 5
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 132,
                "tls": 57,
                "wait": 214,
                "connect": 112,
                "download": 151
            },
            "response_ms": 666
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 130786,
            "co2_grams": 0.0048,
            "cleaner_than": 16
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "97.74.102.3",
                    "host": "ns05.domaincontrol.com"
                },
                {
                    "ip": "173.201.70.3",
                    "host": "ns06.domaincontrol.com"
                }
            ],
            "zone": "usdtflashsoftwares.store"
        },
        "location": {
            "ip": "13.140.163.172",
            "asn": "51167",
            "org": "Contabo GmbH",
            "city": "Lauterbourg",
            "country": "FR"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "usdtflashsoftwares.store"
        },
        "dns": {
            "A": [
                "13.140.163.172"
            ],
            "NS": [
                "ns05.domaincontrol.com",
                "ns06.domaincontrol.com"
            ],
            "SOA": "{\"nsname\": \"ns05.domaincontrol.com\", \"hostmaster\": \"dns.jomax.net\", \"serial\": 2026103000, \"refresh\": 28800, \"retry\": 7200, \"expire\": 604800, \"minttl\": 600}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "13.140.163.172",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://usdtflashsoftwares.store"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.usdtflashsoftwares.store"
            ]
        },
        "linked_pages": {
            "external": [
                "https://wa.me/16462369686",
                "https://signal.me/"
            ],
            "external_count": 2,
            "internal_count": 36
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2026-10-29T18:27:11Z",
            "updated": "2026-10-29T18:27:12Z",
            "expires": "2027-10-29T18:27:11Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientUpdateProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp",
                "clientRenewProhibited https://icann.org/epp",
                "addPeriod https://icann.org/epp"
            ],
            "nameservers": [
                "ns05.domaincontrol.com",
                "ns06.domaincontrol.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html"
            }
        }
    }
}
```