aimduelx[.]com

Analysis of aimduelx.com shows a clear pattern of brand impersonation targeting the cs2 brand through social media phishing. The domain was registered on October 21, 2025 via Dominet (HK) Limited and resolves to the Cloudflare IP address 172.67.184.143, located in the United States under ASN 13335. No SSL certificate is present, and the domain uses Cloudflare nameservers curt.ns.cloudflare.com and hera.ns.cloudflare.com. Security telemetry indicates that 14 of 95 VirusTotal vendors have flagged the domain, and it appears on one external blocklist.

PhishDestroy has also listed the domain as blocked. AlienVault OTX reports the domain in 15 threat intelligence pulses, reinforcing its malicious reputation. Independent trust scoring services reflect the same risk profile, with Scamadviser assigning a 1/100 score and Gridinsoft a 48/100 score. The site’s current operational status is offline, limiting immediate threat execution but not eliminating residual risk for users who may have previously accessed the domain.

Defenders should continue to enforce network-level blocks for the IP 172.67.184.143 and add aimduelx.com to internal URL filtering lists. Monitoring for re‑registration or similar domain registrations that mimic cs2 branding is advised, as the underlying infrastructure (Cloudflare hosting) can be reused for future campaigns. Given the low trust scores, multiple vendor detections, and inclusion in OTX pulses, the domain should be treated as a high‑confidence malicious indicator and incorporated into threat‑intel feeds for proactive defense.