usdt-28[.]com

The domain usdt-28.com has been identified as a high-risk phishing site, currently active as of July 12, 2026. Analysis indicates that the domain was registered through Gname.com Pte. Ltd. on December 07, 2025. The site's page title is 'Verification,' which may suggest that the attackers are attempting to trick visitors into providing personal or financial information under the guise of a verification process. The domain appears on two security blocklists, and it is referenced in 23 threat intelligence pulses on AlienVault OTX, highlighting its involvement in multiple security incidents. Gridinsoft's trust score for this domain is 0/100, indicating a highly untrusted status, and the domain is blocked by PhishDestroy and BLP-Malware, further corroborating the threat level. The domain resolves to the IP address 172.67.192.238, and it uses an SSL certificate provided by Google Trust Services. The technologies detected on the site include jQuery and Cloudflare services, which are often used to enhance the legitimacy and functionality of phishing sites. While the specific content of the site has not been fully analyzed, the combination of a low trust score, presence on blocklists, and multiple threat intelligence references suggests that usdt-28.com is likely part of a sophisticated phishing campaign. Defenders are advised to block access to this domain, monitor network traffic for any interactions with it, and educate users about the risks of visiting untrusted verification pages. Additionally, organizations should verify that their internal systems are not being used as part of this campaign and consider implementing additional security measures to protect against phishing attacks.