usdtqbdizhichaxun[.]com[.]cn

PhishDestroy first observed usdtqbdizhichaxun.com.cn on Aug 9, 2026. The captured page title is “USDT钱包地址查询 - TRC20/ERC20钱包地址验证与查询工具”. Current evidence score: 98/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, Spamhaus DBL, and Cloudflare Radar. VirusTotal recorded 13 detections among 91 engines: alphaMountain.ai, BitDefender, CRDF, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, PhishFort, SOCRadar, Sophos on Aug 20, 2026 at 02:09 UTC. Spamhaus DBL: DBL_PHISH on Aug 10, 2026 at 10:30 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the dga domains category; its verdict timestamp was not retained. Non-positive and contextual checks: AlienVault OTX listed 3 community pulse references (not vendor detections) on Aug 12, 2026 at 05:23 UTC. The separate external-blocklist snapshot contained no matches on Aug 23, 2026 at 06:20 UTC. Google Safe Browsing returned no flag on Aug 12, 2026 at 05:22 UTC.

The collector marked the hostname reachable on Aug 22, 2026 at 22:15 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 154.201.226.39 on AS132839 (POWER LINE DATACENTER). The recorded endpoint location is Hong Kong, HK. The stored server header is nginx. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Oct 13, 2026; checked Aug 10, 2026 at 13:02 UTC.

The content indicators and 3 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.