usdt-ton-mixer[.]su

The domain usdt-ton-mixer.su has been identified as a generic phishing site, currently taken offline. This domain impersonated a legitimate USDT mixing service on the TON blockchain, claiming to offer anonymous Tether mixing without KYC. The site was designed to deceive users into connecting their wallets or sharing sensitive information, likely to steal funds or credentials. The domain was registered through R01-SU and created on February 21, 2026, indicating a relatively recent setup. It resolved to IP address 188.114.96.3 and used an SSL certificate from Google Trust Services (WE1), adding a false layer of legitimacy. VirusTotal flagged this domain by 1 out of 95 security vendors, and it appears on one security blocklist, suggesting limited but significant recognition as a threat.

The phishing nature of usdt-ton-mixer.su is confirmed by its fraudulent page title and the fact that it has been taken offline. Users who may have interacted with this site are at risk of asset theft or data compromise. PhishDestroy recommends that anyone who visited the site or entered credentials immediately revoke any permissions granted to the site, change passwords, and monitor accounts for unauthorized activity. Avoid interacting with similar domains that promise anonymity or bypass KYC, as these are common lures in crypto phishing campaigns. Always verify URLs against official sources before connecting wallets or sharing personal information.