usdtclear[.]com

usdtclear.com is currently flagged as a high‑risk generic phishing site. The domain was registered on 7 May 2026 through Cloudflare, Inc. and resolves to the IP address 188.114.96.3, which is owned by a Cloudflare network located in Canada. The host serves over HTTPS using a Let’s Encrypt certificate (E8) and presents a page title “USDTClear · 안전하고 빠른 USDT 거래”, indicating an attempt to lure victims with promises of safe and fast USDT transactions. Technical fingerprints show a Node.js/Express stack, Google Analytics, Cloudflare Browser Insights and HTTP/3 support, all typical of a modern phishing infrastructure. The site returns HTTP 502, suggesting the backend is presently unavailable or mis‑configured, yet the domain remains active on at least one public blocklist and has been blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100 and three of ninety‑two VirusTotal scanners have flagged the domain, reinforcing the malicious assessment. No further content analysis is available, so the exact phishing workflow cannot be confirmed. Defenders should treat the domain as malicious, block DNS and HTTP(S) traffic to 188.114.96.3, monitor for related C2 patterns, and consider adding the domain to internal blocklists. Ongoing observation is advised in case the backend becomes operational.