🌐 uspsvco.com
DOMAIN
· host
uspsvco.com
· threat 0.50 (HIGH)
· Ransomware · TUCOWS.COM, CO. First seen 2026-08-23 08:57:18 · last seen 2026-08-24 01:43:29
🔄 Pivot:📁 Ransomware
Threat score
0.50
MEDIUM
Sightings
2
1 sources
Subdomains (local)
1
from indicators
Related IPs
0
A/AAAA records
DNS records (local)
0
0 types
Reporting sources
1
0 enrichments
📡 Reporting-source breakdown
1
1 total source links on this indicator.
🏷 Tag breakdown (domain family)
No data.
📈 DNS record-type counts
No data.
📅 First-seen timeline (family)
2
🏷 WHOIS / Registration (local cache)
| Registrar | TUCOWS.COM, CO. |
| Registrant Org | REDACTED FOR PRIVACY |
| Country | US |
| Abuse Email | domainabuse@tucows.com |
📡 DNS Records
Live (DNS-over-HTTPS · optional augmentation)
| Type | Value | TTL |
|---|---|---|
| MX | 0 uspsvco.com. |
14400 |
| NS | nsc.go54.com. |
21600 |
| NS | nsd.go54.com. |
21600 |
| TXT | v=spf1 ip4:131.153.147.178 include:spf.antispamcloud.com include:spf.host-ww.net +a +mx ~all |
14400 |
🌐 Subdomains — local intel (1)
Domains/URLs in the local DB ending in .uspsvco.com (bounded to 200). Each links to its own dossier.
📡 Reporting Sources (1)
Ransomware Abuse Domains | Ransomware |
🌐 Same-ASN domains (0)
No ASN linkage in local intel.
🔍 OSINT pivots — external lookups
🔗 Internal pivots & actions
📁 Case Management
Every panel resolves local-first: threat, category, first-seen & sightings from
indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Audit DNS to build passive history
- Pivot resolved IPs to their dossiers
- Report phishing to registrar/host