mixerusdt[.]com

The domain mixerusdt.com was registered on February 21, 2026 through CNOBIN INFORMATION TECHNOLOGY LIMITED and is currently reported as offline. DNS resolution points to the IP address 172.67.147.98, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No SSL certificate is presented for the host, indicating that HTTPS connections are not available. The site’s page title, "USDT Mixer Analysis: Privacy Tools for Stablecoin Transactions," suggests a focus on stablecoin mixing services, yet the domain is classified under the scam type "Brand Impersonation" with the target brand listed as "across." VirusTotal analysis shows that one of ninety‑three security vendors flagged the domain, providing a minimal detection signal.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service. A Gridinsoft trust score of 1 out of 100 further reflects a low confidence rating. Nameservers are clint.ns.cloudflare.com and stella.ns.cloudflare.com, both associated with Cloudflare’s DNS infrastructure.

While the available data confirms the domain’s registration details, hosting environment, and limited detection history, several aspects remain uncertain: the exact malicious payload or phishing kit employed, any active command‑and‑control endpoints, and whether the site ever served malicious content before being taken offline. Defenders should continue to monitor the IP address 172.67.147.98 for any resurgence of activity, enforce blocklisting of the domain across web filtering solutions, and incorporate the domain’s indicators—such as its registrar, nameservers, and page title—into threat‑intel feeds. Given the low trust score and the single vendor detection, the domain should be treated as a high‑confidence impersonation indicator until further evidence emerges.