usdt929[.]com

This domain, usdt929.com, is flagged as an active crypto scam infrastructure targeting users with fraudulent blockchain investment schemes. Registered on February 21, 2026, through Gname.com Pte. Ltd., the domain resolves to IP 172.67.183.9 (AS13335, Cloudflare, Inc., US) and is proxied behind Cloudflare nameservers (bart.ns.cloudflare.com, jocelyn.ns.cloudflare.com). The site returns an HTTP 200 status and employs technologies including Vue.js, HSTS, and Cloudflare Browser Insights, suggesting a structured frontend designed to appear legitimate. Analysis indicates the domain is explicitly categorized as a crypto scam, with the page title 'Blockchain Investment Project Website - Unlock Financial Freedom' reinforcing its fraudulent investment theme. Google Safe Browsing has flagged the domain for social engineering, and it appears on at least one security blocklist, including PhishDestroy. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious sites leveraging Cloudflare. Defenders should note that 16 of 95 security vendors on VirusTotal have detected this domain as malicious, though this does not represent exhaustive validation. The domain remains active as of July 12, 2026, with no evidence of takedown or mitigation. Given the high-risk classification and confirmed scam type, network-level blocking is recommended. Additional monitoring for related infrastructure (e.g., payment gateways, redirect chains) is advised, as this domain may be part of a broader campaign. The exact content and user interaction flow are not yet analyzed, so behavioral detection rules should focus on known scam patterns rather than visual or structural elements.