usdtmedellin[.]com

This domain, usdtmedellin.com, is identified as a generic phishing threat targeting cryptocurrency users, specifically those interacting with USDT (Tether) wallets. Analysis indicates the domain is designed to mimic legitimate USDT wallet services, likely deploying a crypto drainer kit to siphon funds from victims' wallets. The domain does not currently exhibit overt branding ties to a specific legitimate service but employs social engineering tactics to deceive users into entering wallet credentials or authorizing malicious transactions. Infrastructure analysis reveals the following technical indicators: the domain has a VirusTotal detection score of 0/95, indicating no antivirus engines have flagged it at the time of analysis. It was registered through HOSTINGER operations, UAB, and resolves to the IP address 35.157.26.135. The domain was created on April 30, 2026, and is currently listed on one security blocklist. Technologies detected include Netlify for hosting and HTTP Strict Transport Security (HSTS) for encrypted connections. The Gridinsoft trust score for this domain is 0/100, further corroborating its malicious nature. As of the latest assessment, usdtmedellin.com has been taken offline, reducing immediate exposure risk. However, the domain's infrastructure remains registered, and there is potential for reactivation or migration to a new hosting provider. Response actions include monitoring for re-emergence, updating blocklists, and alerting cryptocurrency exchanges and wallet providers to the threat. Users are advised to verify wallet addresses independently, avoid interacting with unsolicited USDT-related links, and employ hardware or multi-signature wallets for high-value transactions to mitigate risk.