usdt938[.]com
Verifica phishing e sicurezza per usdt938.com
“Blockchain Investment Project Website - Unlock Financial Freedom”
usdt938.com — Contenuto non disponibile (HTTP 502). Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 5/93 (CyRadar, Ermes, Gridinsoft, Seclookup, SOCRadar); Google Safe Browsing flagged; PhishDestroy score 80/100. Registrar: Gname.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Analysis of usdt938.com confirms that the domain is being used for a cryptocurrency‑related phishing operation. The site was registered on February 21, 2026 through Gname.com Pte. Ltd., and its DNS resolves to 104.21.9.26, an address owned by Cloudflare (AS13335) located in the United States. The domain employs a Google Trust Services / WE1 SSL certificate, indicating that TLS is correctly terminated, but the certificate alone does not validate the content. Google Safe Browsing has flagged the URL for social engineering, and five of ninety‑three VirusTotal scanners have identified it as malicious, reinforcing the phishing assessment.
The page title, "Blockchain Investment Project Website - Unlock Financial Freedom," aligns with the declared scam type of a crypto scam and suggests an attempt to lure victims with investment promises. Infrastructure analysis shows the site is built on Vue.js, enforces HTTP Strict Transport Security, and utilizes Cloudflare Browser Insights and HTTP/3, all of which are typical of modern phishing kits that aim to appear legitimate. The domain is listed on a single security blocklist and has been taken offline, with PhishDestroy confirming the takedown. Gridinsoft assigns a trust score of 0 out of 100, indicating a complete lack of reputational confidence.
While the exact phishing page content has not been captured, the combination of registrar details, hosting through Cloudflare, a valid TLS certificate, and the malicious classifications provides sufficient evidence for defensive action. Security teams should add usdt938.com to blocklists, monitor for any re‑hosting attempts on alternate IPs or Cloudflare accounts, and update URL filtering rules to capture the specific page title pattern. Continuous observation of the associated IP range and Cloudflare name‑servers (bart.ns.cloudflare.com, jocelyn.ns.cloudflare.com) is recommended to detect potential redeployment of the campaign.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 5 identified
Progressive JavaScript framework for building user interfaces.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Prove archiviate
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of usdt938.com · checked Mar 6, 2026
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo