usdt-13[.]com

The domain usdt-13.com was registered on 07 Dec 2025 through Gname.com Pte. Ltd. The site is protected by a Google Trust Services certificate (WE1) and is served from Cloudflare’s network (ASN 13335). DNS resolves to 104.21.90.9 and uses the Cloudflare nameservers julio.ns.cloudflare.com and marge.ns.cloudflare.com. The web server returns HTTP 403 for the root request, and the page title returned is “Verification”. Technology fingerprinting shows jQuery, Cloudflare edge services, and HTTP/3 support. Infrastructure analysis aligns with a typical crypto‑related phishing campaign. The domain is classified as a crypto scam, and its risk rating is high. Threat intelligence sources indicate a Gridinsoft trust score of 0 out of 100, and two of ninety‑five antivirus scanners on VirusTotal have flagged the site. The domain appears on one external blocklist and is actively blocked by PhishDestroy, confirming that security operators have observed malicious activity associated with it. Defenders should treat any traffic to usdt-13.com as malicious. Blocking the domain at network perimeter and DNS level will prevent credential or cryptocurrency address harvesting. Continuous monitoring of Cloudflare edge logs for connections to 104.21.90.9 can aid in detecting compromised hosts. Because the page content has not been publicly analysed beyond the title “Verification”, additional sandbox inspection is recommended to confirm any payloads or credential‑stealing mechanisms that may be served after the initial HTTP 403 response.