usdt-ils[.]xyz

The domain usdt-ils.xyz has been assessed as a crypto drainer phishing site with an elevated risk level. This domain is designed to deceive users into providing sensitive information, particularly related to cryptocurrency exchanges, which could lead to financial loss.

Infrastructure analysis reveals that usdt-ils.xyz has a Gridinsoft trust score of 0/100, indicating a highly untrustworthy site. The domain resolves to the IP address 216.150.16.193 and was registered through DYNADOT LLC on June 21, 2026. According to VirusTotal, 5 out of 95 security vendors have flagged this domain as malicious. Additionally, the domain appears on 1 security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt, which does not inherently indicate trustworthiness and is often used by malicious actors to gain user confidence.

To mitigate the risks associated with usdt-ils.xyz, organizations should update their DNS blacklists and firewall rules to block traffic to this domain. Users should be educated on the signs of phishing, such as suspicious URLs and requests for sensitive information, particularly in the context of cryptocurrency exchanges. Regular security audits and monitoring of network traffic are recommended to detect and prevent any unauthorized access or data exfiltration.