send-usdt-true[.]space

Analysis indicates that the domain send-usdt-true.space was registered on 5 October 2025 through Hostinger operations, UAB. The authoritative nameservers ns1.dns-parking.com and ns2.dns-parking.com resolve the domain to the IPv4 address 84.32.84.32, which belongs to AS47583 Hostinger International Limited and is geolocated to Lithuania. The HTTP response presents the page title “Parked Domain name on Hostinger DNS system” and no TLS certificate is offered, confirming the site operates without encryption. The domain is classified as a crypto‑related scam, specifically a generic phishing attempt targeting users with false promises involving USDT.

Detection infrastructure has recorded the domain on two independent blocklists, and it is listed as blocked by PhishDestroy and ScamSniffer. VirusTotal analysis shows three of ninety‑five security vendors flag the domain, providing additional corroboration of malicious intent. The current operational status is offline, indicating the site is no longer reachable at the time of reporting.

While the available evidence confirms the domain’s association with phishing infrastructure, the exact payload or victim interaction flow has not been observed, and no malicious binaries or URLs have been captured. Defenders should continue to block the domain at network perimeter and DNS filtering layers, monitor for any re‑hosting attempts on alternative IP ranges, and consider adding the IP address 84.32.84.32 to threat‑intel feeds. Ongoing surveillance of the registrar Hostinger and the associated ASN is recommended to detect future registrations that may reuse similar naming patterns.