usdt[.]sundapp[.]top

Usdt.sundapp.top, a domain associated with a DeFi scam, is currently offline. Despite its takedown, it was flagged by 3 out of 93 vendors on VirusTotal, indicating its malicious nature. The domain was hosted in the United States by FASTNET DATA INC, with an SSL certificate issued by Let's Encrypt. It was registered through Gname.com Pte. Ltd.

The domain's page title, "Mining," suggests it may have been masquerading as a legitimate cryptocurrency mining operation. However, its inclusion in one public blocklist, specifically PhishDestroy's, underscores its fraudulent intent. The domain was created on February 21, 2026, but PhishDestroy detected it as early as February 11, 2026, showcasing the proactive identification capabilities of PhishDestroy's threat intelligence pipeline.

Phishing domains like usdt.sundapp.top exploit the lag between domain registration and detection by antivirus databases. This particular domain was flagged relatively quickly, but the initial zero detections highlight the importance of early threat identification. The swift takedown of the domain mitigates potential harm, but its brief existence serves as a reminder of the persistent threat posed by DeFi scams.