transfer-usdt[.]io

The domain transfer-usdt.io is under investigation for credential theft and is currently active. This assessment is based on the domain's infrastructure, registration details, and detection status, which collectively suggest a potential threat.

Analysis indicates that the domain was created on March 23, 2026, and is registered through NameSilo, LLC. The domain resolves to the IP address 172.67.187.174, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. Despite being active, the domain has not been flagged by VirusTotal, with 0/95 detections. However, it appears on one security blocklist, specifically PhishDestroy, which may indicate a targeted phishing campaign. The SSL certificate is issued by Google Trust Services under the WE1 certificate authority, which can lend a false sense of security to unsuspecting users.

To mitigate the risk of credential theft, organizations and individuals should avoid clicking on links or entering sensitive information on the transfer-usdt.io domain. IT teams should consider blocking access to this domain at the network level to prevent potential data breaches. Additionally, users should be educated on the signs of phishing and encouraged to verify the legitimacy of websites before providing any personal or financial information.