audit-usdt[.]org

The domain audit-usdt.org was observed as offline on the report date of July 24, 2026. Registration data shows the domain was created on February 21, 2026 and was registered through NiceNIC International Group Co., Limited. DNS resolution points to the IP address 104.21.49.46, which belongs to AS13335 Cloudflare, Inc., and the hosting location is identified as the United States. The authoritative nameservers are arely.ns.cloudflare.com and david.ns.cloudflare.com, indicating the use of Cloudflare DNS services.

The site’s SSL certificate is issued by Google Trust Services under the WE1 certificate authority, confirming the presence of HTTPS encryption at the time of capture. Page metadata reveals the title "Login | Skote Laravel 10 + Vue 3 Admin & Dashboard," and technology analysis reports the presence of Vue.js, Cloudflare Browser Insights, and HTTP/3 support, suggesting a modern web stack. Security telemetry shows that two of ninety‑three VirusTotal scanners flagged the domain, and it appears on a single external blocklist. The domain has been actively blocked by PhishDestroy, and Gridinsoft assigned a trust score of 0 out of 100, reflecting a high confidence in malicious intent.

The classified threat type is credential phishing, targeting login credentials potentially associated with the Skote Laravel admin interface. While the page title provides limited insight into the exact credential capture mechanism, the combination of a recent registration, low trust score, vendor detections, and blocklist inclusion supports the assessment of an active phishing campaign. Defenders should add audit-usdt.org to network blocklists, monitor for any resurgence of the domain or its IP address, and enforce web filtering policies that deny connections to this host. Continuous threat‑intel feeds should be consulted for any new indicators, and any endpoints that may have previously accessed the domain should be examined for possible credential exposure.