usdt-finance.org
Appeared in the .org zone on Wednesday, September 16, 2026; by the end of that day the census found active website about crypto web3. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Fake 'USDT Finance' portal promises to 'unlock liquidity' and gives new users free USDT (up to 28u) in exchange for submitting a TRC20 wallet address, then pushes victims to a Telegram 'support' contact — a classic crypto advance-fee/drainer funnel dressed up with unaffiliated logos (MetaMask, Chainlink, Aave, Circle, TRON, Binance) as fake endorsements rather than impersonating one specific brand.
The domain impersonates a legitimate financial/crypto service ('USDT Finance') and requests users submit TRC20 wallet addresses under the guise of a 'pre-qualification' process promising free USDT rewards ('up to 28u'). This is a classic crypto airdrop scam that harvests wallet addresses and directs users to Telegram for 'further steps'—a standard pattern for follow-up compromise or fraud. The MetaMask branding on the page (listed as a supported wallet) is referential, not impersonation of MetaM
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
Same data as JSON: /api/zone/domain/usdt-finance.org. This page is not indexed by search engines and does not link to the site it describes.