transferusdtbep20[.]shop

This domain, transferusdtbep20.shop, is assessed at an elevated risk level as a generic phishing threat. The domain name mimics legitimate cryptocurrency transfer services, specifically targeting users of the BEP-20 token standard. Infrastructure analysis reveals it was created on February 21, 2026, and is now offline, but its design and registration pattern are consistent with credential or wallet-drainer phishing campaigns.

Key indicators include a VirusTotal detection rate of 2 out of 95 security vendors, a Gridinsoft trust score of 0 out of 100, and appearance on 4 security blocklists. The domain resolves to IP address 35.157.26.135, registered through HOSTINGER operations, UAB, with technologies including Cloudflare, Netlify, HSTS, and cdnjs. It is blocked by multiple security tools including MetaMask, ScamSniffer, SEAL, and PhishDestroy, and uses a Let's Encrypt SSL certificate. The page title 'Page not found' suggests the phishing page was removed or never fully deployed.

Mitigation steps for this generic phishing threat include never visiting the domain or clicking any links associated with it. Users should verify cryptocurrency transaction URLs directly through official wallet interfaces and avoid entering private keys or seed phrases on any website. If credentials were exposed, affected users should immediately transfer assets to new wallets and revoke any token approvals granted to this domain. Regular monitoring of wallet addresses for unauthorized transactions is recommended.