usdtbep20-mining[.]vip

The domain usdtbep20-mining.vip was registered on May 07 2026 through Dynadot Inc and resolves to IP 159.100.6.19 hosted by UltaHost Inc in Germany. The site presents a valid TLS certificate from Let’s Encrypt (R12) and returns HTTP 200, indicating an active web service. Infrastructure analysis shows the hosting uses LiteSpeed web server and a stack comprising PHP, Laravel, Bootstrap, Alpine.js, jsDelivr, Popper, and Livewire, suggesting a custom-built application rather than a simple redirect. Reputation data is extremely poor: Gridinsoft assigns a trust score of 0/100, Scamadviser 1/100, and the domain appears on at least one security blocklist. Seven of ninety‑two VirusTotal scanners have flagged the domain, and PhishDestroy has already blocked it, classifying the site as a crypto‑related phishing operation. The page title “Usdtbep20-Mining – USDT‑BEP20 Cloud Mining” aligns with the declared scam type of a crypto scam, reinforcing the likelihood that the site is used to lure victims into providing private keys or payment credentials. No additional public intelligence, such as observed malicious payloads or compromised accounts, is currently available. Defenders should add the domain and its associated IP address to blocklists, monitor DNS queries for the listed authoritative nameservers (ns1‑ns4.ultahost.com), and enforce strict outbound filtering for connections to the IP. Network sensors should flag any attempts to post data to the site, especially forms containing wallet addresses or authentication tokens. Continuous re‑evaluation is advised in case the infrastructure changes or further threat intelligence emerges.