tradableflashusdt[.]online

The domain tradableflashusdt.online was registered on February 21, 2026 through Name.com, Inc. It resolves to the IPv4 address 66.45.244.235, which is hosted in the United States and belongs to AS19318 Interserver, Inc. The domain is served without an SSL/TLS certificate, indicating that any traffic to the site would be unencrypted. Four distinct name servers (ns1cny.name.com, ns2lns.name.com, ns3bfm.name.com, ns4bfy.name.com) are configured, a pattern often seen in rapidly provisioned malicious infrastructure. The page title observed on the site reads "USDT Flow | Buy Flash USDT | Instant Delivery," suggesting a cryptocurrency‑related lure.

The site explicitly impersonates the Bybit brand, positioning it as a Bybit‑related service. Detection data show the domain appears on a single security blocklist and has been flagged by two of ninety‑three VirusTotal scanners, indicating limited but non‑trivial detection across the security ecosystem. PhishDestroy has already taken the domain offline, and the current status is reported as offline.

While the limited number of vendor detections and a single blocklist entry suggest the site may have been short‑lived, the combination of brand impersonation, unencrypted delivery, and hosting on a shared provider warrants continued monitoring. Defenders should update URL filtering and email security policies to block any URLs containing "tradableflashusdt.online" and ensure that Bybit brand indicators are included in brand‑monitoring rules. Incident response teams should also consider correlating any recent user reports of Bybit‑related phishing with this indicator, and threat‑intel platforms should enrich the indicator with the observed IP, name server set, and page title for broader sharing.