onchainusdtex[.]black

This domain, onchainusdtex.black, is specifically designed for generic phishing activities, targeting users with a deceptive page titled 'USDT Savings.' The domain poses a significant risk as it attempts to trick visitors into disclosing sensitive information or engaging in fraudulent transactions involving USDT (Tether).

Analysis indicates that onchainusdtex.black has been flagged by 12 out of 95 security vendors on VirusTotal, suggesting a high level of suspicion and potential threat. The domain was registered through Gname.com Pte. Ltd. on February 5, 2026, and was associated with the IP address 118.107.28.194, which is located in Hong Kong (HK) and is part of the AS152194 CTG Server Limited network. The domain currently has a Let's Encrypt R13 SSL certificate, which may be used to add a false sense of security. Additionally, the domain appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. Google Safe Browsing has also flagged this domain as a phishing site, further confirming its malicious nature.

Users who have visited onchainusdtex.black should immediately change any passwords or sensitive information that may have been entered on the site. It is recommended to monitor financial accounts and credit reports for any unauthorized activity. If any suspicious transactions are detected, users should report them to their financial institutions and consider initiating a fraud alert. Additionally, users should be cautious of similar domains and verify the authenticity of any website before providing personal or financial information.