usdt-crypto-exchange[.]com

The domain usdt-crypto-exchange.com is currently active and was registered on December 11, 2025 through SOLLUTIUM LLC. Infrastructure analysis shows the domain resolves to IP address 188.114.97.3, which is part of AS13335 Cloudflare, Inc. and geolocated to the United States. The domain is served behind Cloudflare, employing Cloudflare Browser Insights and HTTP/3, and uses a TLS certificate issued by Google Trust Services under the WE1 identifier. The site returns an HTTP 200 status code and presents the page title "USDT Crypto Exchange No KYC No AML Fast Anonymous Swap", indicating a focus on cryptocurrency services without regulatory compliance. The domain is explicitly listed as impersonating the brand aave and is classified as an investment scam.

Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting a high likelihood of malicious activity. The domain appears on four security blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—demonstrating that multiple threat intelligence feeds have flagged it. Additionally, AlienVault OTX reports the domain in one threat‑intel pulse, and VirusTotal analysis shows four out of ninety‑five security vendors flagging the domain as malicious. Nameservers milan.ns.cloudflare.com and samara.ns.cloudflare.com further confirm Cloudflare hosting.

While the page content beyond the title has not been publicly disclosed, the combination of brand impersonation, investment‑scam labeling, low trust score, and multiple detections provides strong evidence of a high‑risk phishing operation. Defenders should block the domain at network perimeter, update URL filtering policies, and monitor for any traffic to the associated IP address. Incident response teams should also investigate any user reports of unsolicited communications referencing aave or USDT crypto exchanges, and consider issuing user awareness advisories that reference the exact domain and its malicious characteristics.