btctousdtt-edu[.]webflow[.]io

PhishDestroy has identified btctousdtt-edu.webflow.io as a generic phishing domain posing an elevated risk to users. This domain was designed to deceive visitors into divulging sensitive information, such as login credentials or financial details, under the guise of a legitimate cryptocurrency exchange or educational platform. The elevated risk level indicates that while the domain is not currently active, it represents a credible threat that could be reactivated or cloned.

Technical analysis reveals that the domain was registered through Webflow and resolved to IP address 172.64.151.8. VirusTotal flagged the domain with 2 out of 95 security vendors marking it as malicious, and it appears on three separate security blocklists. The domain has since been taken offline, but its brief period of activity may have already compromised users who interacted with it. The low trust score from security vendors underscores the need for vigilance.

Users who have visited btctousdtt-edu.webflow.io should immediately change passwords for any accounts used on the site and enable two-factor authentication. It is also advisable to monitor financial accounts for unauthorized transactions and run a full security scan on any devices that accessed the domain. PhishDestroy recommends reporting the domain to relevant authorities and blocking it at the network level to prevent future access.