precousdt[.]com[.]br
“Preço do USDT”
Résumé des preuves
On 21 February 2026 the domain precousdt.com.br was registered through a Gmail‑based account and delegated to the NSONE name server cluster (dns1.p06.nsone.net through dns4.p06.nsone.net). DNS resolution points to the single IPv4 address 35.157.26.135, which belongs to Amazon.com, Inc. (AS16509) and geolocates to Germany. The web service is hosted on Netlify and presents an HTTPS endpoint secured by a Let’s Encrypt certificate (issuer E7). HTTP response headers include HTTP Strict Transport Security (HSTS), indicating the site enforces TLS for future connections. The page title returned by the server is “Preço do USDT”, suggesting the site is intended to display a price for the USDT stablecoin, a common lure in cryptocurrency‑related phishing campaigns.
The domain currently appears on one public security blocklist and is actively blocked by the PhishDestroy feed. Independent scanning on VirusTotal recorded a single positive detection out of ninety‑three antivirus engines, confirming that at least one vendor has identified malicious behavior. The Gridinsoft trust score is 0 out of 100, reinforcing the classification of the host as untrustworthy. According to the risk assessment, the infrastructure is considered elevated, but the site has been taken offline at the time of this analysis.
No additional evidence such as login forms or payloads has been observed, and the exact phishing kit or dropper remains unknown. Defenders should continue to block precousdt.com.br at DNS and proxy layers, monitor the associated IP range for reuse, and add the domain to internal blocklists. Given the Netlify hosting, future re‑hosting of the same content under a new domain is plausible; therefore, threat‑intel teams should watch for similarly titled pages and reuse of the same SSL certificate fingerprint. Ongoing observation of the NSONE name servers for rapid domain turnover is also advised.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260124-C6BBA2- Titre de la page capturée
- Preço do USDT
- Artefact PDF
- Preuve PDF
Texte intégral des preuves
Acceptable Use Policy (AUP): The domain precousdt.com.br is engaged in phishing activities, which is a clear violation of your AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The continued operation of this domain constitutes a breach of your TOS, which reserves the right to suspend or terminate services for violations related to fraudulent activities.
Applicable Laws (BR):
Lei nº 12.737/2012 (Carolina Dieckmann Law): This law criminalizes unauthorized access to computer systems and data, which is applicable to phishing schemes that deceive users into providing sensitive information.
Lei nº 13.709/2018 (General Data Protection Law - LGPD): This law mandates the protection of personal data and prohibits its misuse, which is directly violated by phishing activities that aim to harvest personal information unlawfully.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to legal liability and regulatory scrutiny. Non-compliance with applicable laws and your own policies can result in severe penalties.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
10 sources externes surveillées Aucune correspondance
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of precousdt.com.br · checked Mar 2, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif