usdtlengqanbaoapp[.]com[.]cn

PhishDestroy identifies usdtlengqanbaoapp.com.cn as a generic phishing domain impersonating a USDT wallet service, actively hosted on 186.241.202.81. This domain was flagged due to its suspicious alignment with cryptocurrency wallet branding, specifically targeting users of Tether (USDT) transactions. No known drainer kit has been publicly linked to this domain, but its recent creation and low detection rate suggest it may be part of an emerging campaign leveraging brand impersonation to harvest credentials or crypto wallet access. This domain was registered through 北京新网数码信息技术有限公司 on April 20, 2026, and resolves to IP 186.241.202.81 via a Let’s Encrypt SSL certificate. VirusTotal shows 2/95 detections (seed 088133) and no Google Safe Browsing (GSB) flagging, indicating it remains under the radar. With no current blocklist entries, this domain poses an elevated risk for users seeking legitimate USDT services. The domain is currently active and under investigation, with no active takedown or mitigation measures in place. Users should avoid interacting with usdtlengqanbaoapp.com.cn and report it to their security teams. Remaining risk includes continued phishing operations due to low detection and lack of proactive blocking. Security teams are advised to monitor for emerging campaigns and update blocklists accordingly.