aimxduels[.]com

The domain aimxduels.com was registered on November 08, 2025 through Dominet (HK) Limited and is currently hosted behind Cloudflare's network (AS13335) with the IP address 172.67.141.109 located in the United States. No SSL certificate is associated with the host, and the domain resolves to the Cloudflare nameservers jen.ns.cloudflare.com and norm.ns.cloudflare.com. The site is classified as a brand impersonation campaign targeting the "cs2" brand, as indicated by the intelligence tag "Impersonates: cs2" and the scam type "Brand Impersonation".

Detection evidence shows that 13 of 95 security vendors on VirusTotal have flagged the domain, and AlienVault OTX has referenced it in five separate threat pulses. Trust metrics are extremely low, with Gridinsoft assigning a score of 1 out of 100 and Scamadviser also reporting a 1 out of 100 rating. The domain appears on one public security blocklist and has been explicitly blocked by the PhishDestroy filtering service.

As of the report date, July 23, 2026, the domain status is recorded as offline and the site has been taken down. Defenders should ensure that the IP address 172.67.141.109 is blocked at perimeter defenses, add aimxduels.com to internal blocklists, and monitor for any new domains registered by the same registrar or using the same Cloudflare nameservers that attempt to impersonate the cs2 brand. Continuous threat‑intel feed monitoring is recommended to capture any emerging pulses that reference this infrastructure.