makeflashusdt[.]live

Analysis indicates that the domain makeflashusdt.live is actively being used for a phishing campaign. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com, and its authoritative name servers are ns1.vercel-dns.com and ns2.vercel-dns.com, suggesting hosting on the Vercel platform. An HTTP 307 response is observed, which typically forwards the client to a secondary location and is consistent with a redirection stage used in many phishing deployments.

VirusTotal reports that four of ninety‑one security vendors have flagged the domain, providing independent confirmation of malicious intent. The site is currently listed on one public security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing its classification as a high‑risk phishing vector. The domain remains active as of the report date, and no evidence of a valid SSL certificate or legitimate page title has been disclosed, leaving the exact content of the landing page unknown.

Defenders should immediately block DNS resolution for makeflashusdt.live, ingest the indicator into network and endpoint protection rules, and monitor for traffic toward the Vercel DNS infrastructure that may be leveraged for similar campaigns. Continuous re‑assessment is advised, as further threat intelligence such as payload signatures or IP geolocation may emerge.