itdesk-services[.]org

As of July 25, 2026, the domain itdesk-services.org has been flagged as a potential phishing domain with an elevated risk level. The domain was created on July 01, 2025, and has since been taken offline. Despite its current offline status, the domain has a poor trust score of 0/100 according to Gridinsoft, indicating a high level of suspicion. The HTTP status code of 200 suggests that the domain was accessible at some point, but this does not necessarily mean it was safe or benign. The domain is registered through GoDaddy.com, LLC and uses nameservers ns67.domaincontrol.com and ns68.domaincontrol.com, which are common for domains registered with this provider.

The SSL certificate for the domain is issued by Let's Encrypt, a widely used free certificate authority. This does not indicate security, as Let's Encrypt certificates can be easily obtained by malicious actors. The domain resolves to the IP address 185.163.85.65, which is located in Sweden and is part of the AS42695 Cleura AB network. This infrastructure has been associated with other malicious activities, adding to the domain's suspicious nature. The domain appears in one security blocklist and is blocked by the PhishDestroy system.

Additionally, it has been included in one threat intelligence pulse on AlienVault OTX, further corroborating its malicious reputation. Analysis indicates that while the domain is currently offline, it has been actively monitored and flagged by multiple security vendors. Defenders should remain vigilant and ensure that this domain is blocked in their network security configurations to prevent any potential future phishing attempts. The exact content and purpose of the domain have not been fully analyzed, but the available evidence strongly suggests that it was used for phishing activities.