usdt-19[.]com

usdt-19.com was observed serving a page with the title “Verification”. The site is protected by a Google Trust Services certificate issued under the WE1 trust model, indicating the use of a legitimate TLS chain but offering no assurance about the content. Infrastructure analysis shows the domain resolves to IP 188.114.96.3, which belongs to Cloudflare, AS13335, located in the United States. The domain is hosted behind Cloudflare’s network, using the nameservers julio.ns.cloudflare.com and marge.ns.cloudflare.com, and leverages modern web technologies such as jQuery and HTTP/3. The domain was registered on 7 December 2025 through Gname.com Pte. Ltd., a registrar known for rapid bulk registrations.

The web server returns HTTP 403 for the requested page, which may be an attempt to hide the payload from casual inspection. A Gridinsoft trust score of 0/100 classifies the site as highly untrusted. The domain appears on at least one security blocklist and is currently blocked by PhishDestroy. VirusTotal reports that 2 of 95 scanning engines flag the domain, reinforcing the suspicion. The recorded scam type is “Crypto Scam”, and the page title “Verification” suggests an attempt to lure victims into providing credentials or wallet information under the pretense of account verification.

No additional evidence about the exact phishing kit or targeted brand is available. Defenders should continue to block the domain at perimeter firewalls, update URL filtering rules, and monitor for any outbound connections to the associated Cloudflare IP. Because the site is still active, ongoing surveillance is advised, and any incidents involving credential or crypto‑wallet compromise should be correlated with this indicator. The combination of a fresh registration, low trust score, active blocklist status, and partial VirusTotal detections warrants a high‑risk classification.