usdtmixer[.]com

The domain usdtmixer.com was registered through easyDNS Technologies, Inc. on January 17, 2024. It resolves to IP 152.89.61.96, which is allocated to Virtual Systems LLC in Ukraine (AS30860). The authoritative nameservers listed are ns13.v-sys.org and ns14.v-sys.org, both consistent with the hosting provider. No TLS certificate was observed and the site currently returns an offline HTTP status.

The page title captured before takedown reads "USDT Mixer - Anonymize your Tether (USDT)", and the domain is classified as a brand impersonation targeting the Ethereum ecosystem. The indicator appears in fifteen AlienVault OTX pulses, and fifteen of ninety‑five VirusTotal scanners flagged the domain as malicious. Gridinsoft assigns a trust score of zero out of one hundred, and the domain is listed on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. The combination of no SSL, a zero trust score, multiple vendor detections, and blocklist listings indicates a high‑confidence malicious intent.

Uncertainty remains regarding the specific phishing payload or any active command‑and‑control infrastructure because the site is offline and no archived content is available. Defenders should continue to block the domain at DNS and network perimeter layers, monitor for potential re‑activation of the host, and add the IP address 152.89.61.96 to threat‑intelligence feeds. Further analysis of any associated subdomains or related infrastructure hosted by Virtual Systems LLC is advised.