usdt-defi-liquidity-pool[.]blog

The domain www.usdt-defi-liquidity-pool.blog was registered on May 15, 2026 through Hostinger operations, UAB, and resolves to the IP address 147.93.38.28, which is located in Brazil and owned by the same hosting provider. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com. The site presents an HTTP 200 response and serves a TLS certificate from Let’s Encrypt (R12). The page title returned by the server is “DeFi Liquidity Pool Guide | What It Is and How It Works,” indicating an attempt to attract users interested in decentralized finance. The domain is currently listed on a single security blocklist and has been flagged by PhishDestroy. Gridinsoft assigns it a trust score of 0 / 100, and VirusTotal reports a single positive detection out of 92 scanners. Classified as a crypto‑drainer, the infrastructure appears active and has not been taken down. Analysts have not observed the site’s content beyond the title, so the exact methodology of the drainer is unknown. Defenders should block the domain and associated IP at the network perimeter, monitor DNS queries for the domain and its nameservers, and consider sink‑holing the IP to disrupt potential fund‑exfiltration flows. Continuous re‑evaluation is advised, as the site may change its payload or host additional malicious resources.