# www.usdttransferswallet.online — SUSPICIOUS

> USDT Transfer Wallet Online is a crypto drainer site with 0/95 VirusTotal detections. Full forensic report available. Check the full report.

## Summary
PhishDestroy identifies www.usdttransferswallet.online as an active crypto drainer posing as a USDT transfer service. This domain leverages a spoofed wallet interface to trick users into connecting their cryptocurrency wallets and authorizing malicious token approvals, enabling unauthorized fund transfers. The threat actor impersonates legitimate USDT transfer services to exploit user trust, a common tactic in cryptocurrency phishing campaigns targeting Tether (USDT) holders and traders.  

This domain was flagged under investigation with a confirmed risk level of active. Technical indicators include a VirusTotal detection score of 0/95 indicating no current antivirus coverage, registration through Ultahost, Inc., and resolution to IP address 140.99.130.18. The domain was created on March 19, 2026, and secured with a Let's Encrypt SSL certificate, while Google Safe Browsing (GSB) status remains unflagged and no blocklist entries have been recorded as of the latest scan. These attributes suggest a recently deployed, minimally detected threat infrastructure optimized for short-term exploitation.  

As of today, the domain remains active and unresolved in major threat databases. Immediate containment measures are recommended including enterprise-level DNS blocking, browser policy updates, and user awareness training to prevent wallet connection attempts. While the current risk is classified as under investigation, the absence of detection points to potential escalation if left unchecked. Users are advised to avoid interacting with this domain, verify all wallet connection URLs via official channels, and report any suspicious transactions to their wallet provider and incident response teams immediately.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-19 16:57:05
- Registrar: Ultahost, Inc.
- IP: 140.99.130.18

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c7c28bea-8bba-4664-9879-eb78fc88739a
- PhishDestroy: https://phishdestroy.io/domain/www.usdttransferswallet.online/
- LLM endpoint: https://phishdestroy.io/domain/www.usdttransferswallet.online/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.usdttransferswallet.online/
Last updated: 2026-03-21