usdtamlbot[.]com[.]bybit-invite-copytrading[.]app

This report details the technical threat posed by the domain usdtamlbot.com.bybit-invite-copytrading.app. The site presented a page title of "AML Check" and was categorized as an AML Scam, specifically designed to impersonate the csgo brand. The primary threat is that the site likely attempted to deceive users into believing they were performing a legitimate anti-money laundering check, potentially to harvest credentials, financial information, or facilitate unauthorized transactions under the guise of the impersonated brand.

Technical evidence confirms the malicious nature of this domain. VirusTotal analysis recorded 8 out of 95 security vendors detecting the site as malicious. The domain was flagged by CRDF, CyRadar, Fortinet, G-Data, and Gridinsoft, and appeared on 1 blocklist. Its IP address is 82.221.129.24, hosted in Iceland (IS) on AS50613 Advania Island ehf. The domain was registered through TLD Registrar Solutions Ltd and created on 2026-02-21. It utilized an R10 SSL certificate and employed Vue.js with Google Font API technologies. The DOM risk score was assessed at 10, indicating a high level of malicious configuration.

As of the analysis, the domain status is DOWN/OFFLINE. Given the high DOM risk score, the impersonation of a known brand, and the confirmed detections by multiple security vendors, the risk level associated with this domain is assessed as High. The site is no longer accessible, but its history of malicious activity warrants caution.