usortech[.]net

The domain usortech.net was registered on 21 February 2026 through NiceNIC International Group Co., Limited. The authoritative name servers are asa.ns.cloudflare.com and eugene.ns.cloudflare.com, both belonging to Cloudflare. DNS resolution returns the address 172.67.128.201, which is advertised as part of AS13335 Cloudflare, Inc. and is geolocated to the United States. No TLS certificate is presented; the service appears to be accessible only over plain HTTP. The site has been taken offline at the time of this analysis, which is reflected in the current status field. The page title observed during the brief crawl reads “U.S Oil ($USO) - Tokenising Real World Oil using Ledger Blockchain”.

This title aligns with the declared scam type of a “Fake Airdrop” and suggests an attempt to lure victims with a cryptocurrency‑style offering. The domain is listed on a single security blocklist and has been flagged by PhishDestroy. VirusTotal reports three positive detections out of ninety‑three scanning engines, indicating that at least a small subset of AV products recognize the host as malicious. Gridinsoft assigns a trust score of 0 out of 100, confirming a low reputation. The intelligence indicates the campaign impersonates “across”, meaning the actors are not targeting a single brand but may be using a generic brand‑agnostic lure. No additional evidence such as screenshots, login forms, or malicious payloads has been published, so the exact phishing vector remains unverified.

The lack of an SSL certificate, combined with Cloudflare’s edge infrastructure, suggests the operators are relying on the provider’s anonymity rather than custom hosting. Defenders should add 172.67.128.201 to network‑level blocklists and monitor DNS queries for usortech.net and its Cloudflare name servers. Because the domain is already listed on a blocklist and has positive VirusTotal detections, existing URL filtering solutions that reference those sources will likely block user access.