flashusdt[.]my

The domain flashusdt.my has been identified as a confirmed phishing site. The threat type is generic phishing, targeting users who may be interested in cryptocurrency transactions, particularly those involving USDT (Tether). No specific brand impersonation or drainer kit has been identified.

Exact technical indicators reveal that VirusTotal (VT) flags this domain with a score of 3/95, indicating a low consensus among security vendors. The domain is registered through Dynadot LLC and resolves to the IP address 216.198.79.1. It was created on February 21, 2026, and currently has a Gridinsoft trust score of 0/100, indicating a highly untrusted site. The domain appears on 1 security blocklist and is blocked by PhishDestroy. The site employs Vercel for hosting and has an HSTS (HTTP Strict Transport Security) policy in place, which can be a tactic to gain user trust by appearing secure. It uses a Let's Encrypt SSL certificate, which is commonly seen in phishing sites due to its ease of acquisition.

As of the latest assessment, flashusdt.my is currently offline, and the domain has been taken down. This action reduces the immediate risk to users. However, the domain's presence on a security blocklist and its low trust score indicate that it has been actively used in phishing attacks. It is recommended that security teams continue to monitor the domain for any signs of reactivation. Users should avoid visiting the site and report any related phishing attempts to their respective security teams. The infrastructure used, including the registrar and IP address, should be reviewed for any associated malicious activities to ensure a comprehensive response to the threat.