serviceusdt[.]org

This report provides an analysis of the domain serviceusdt.org, which was involved in a brand impersonation campaign targeting the csgo brand. The domain was registered through Web Commerce Communications Limited dba WebNic.cc on April 23, 2025. The infrastructure analysis reveals that the domain resolves to the IP address 194.87.110.74, which is located in Russia under the Autonomous System Number (ASN) AS48347, operated by JSC Mediasoft ekspert. The domain's status as of July 25, 2026, is offline, suggesting that the site has been taken down or is no longer actively hosted.

Despite the domain being offline, the page title 'AML Check' suggests it was potentially used for a crypto scam, as indicated by the known intelligence. The domain is flagged on one security blocklist, specifically PhishDestroy, indicating that it has been identified as part of a phishing campaign. The Gridinsoft trust score for this domain is 0 out of 100, which is the lowest possible score and suggests a high level of risk.

Analysis from 93 security vendors via VirusTotal reveals that 3 vendors have flagged this domain, further indicating its potential involvement in malicious activities. Defenders should be cautious of any activity related to this domain and ensure that it remains blocked in security systems to prevent any residual risks. While the domain is currently offline, the historical evidence of its involvement in a crypto scam and brand impersonation campaign should be noted and used to inform broader security policies and user awareness programs.