usdtsend[.]sbs

This domain is flagged as an elevated-risk brand impersonation site specifically targeting Trust Wallet, a cryptocurrency wallet service. The site employs deceptive branding to trick users into divulging sensitive wallet credentials or authorizing malicious transactions, potentially leading to unauthorized crypto asset drainage. The threat type is classified as brand impersonation with a secondary risk of crypto drainer activity, given the domain's association with cryptocurrency transactions. Analysis indicates the domain usdtsend.sbs was registered through Dynadot LLC on April 24, 2026, and resolves to the IP address 63.176.8.218. At the time of assessment, 10 out of 95 security vendors on VirusTotal had detected the domain as malicious, while it appeared on one security blocklist. The page title explicitly mimics Trust Wallet's official branding, reinforcing the impersonation attempt. Additional infrastructure analysis reveals a Gridinsoft trust score of 0/100, further corroborating its malicious nature. The domain has since been taken offline, though historical resolution data confirms its prior operational status. Mitigation measures for users who may have interacted with this domain include immediate revocation of any connected wallet authorizations, particularly those linked to decentralized applications or suspicious transaction requests. Affected individuals should conduct a full audit of their wallet activity for unauthorized transfers and consider migrating assets to a new wallet if compromise is suspected. Organizations monitoring for similar threats should block the domain and its associated IP address (63.176.8.218) at the network level. Security teams are advised to monitor for newly registered domains under the same registrar (Dynadot LLC) with similar naming patterns, as these may indicate follow-up campaigns.