cs-money[.]com[.]ru

The domain www.cs-money.com.ru is a confirmed phishing site engaged in brand impersonation targeting cs2, a well-known gaming platform. It presents itself as a legitimate trade bot for CS:GO and CS2 skin exchanges but is designed to steal user credentials or sensitive information. As of the latest verification, www.cs-money.com.ru has been taken offline, though it previously posed an elevated risk due to its deceptive branding and active phishing operations.

Technical indicators confirm the malicious nature of www.cs-money.com.ru. The domain was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was created on February 21, 2026, and resolved to the IP address 212.192.14.27, hosted in Russia under AS207713 (GLOBAL INTERNET SOLUTIONS LLC). The SSL certificate was issued by Let's Encrypt (R12), and the observed page title was 'CS.MONEY — Трейд Бот для обмена скинов CS:GO/CS2'. Gridinsoft assigned it a trust score of 0/100, and the site returned an HTTP 429 status before being taken offline.

Users who interacted with www.cs-money.com.ru should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on their accounts, and monitor for unauthorized transactions or account activity. If financial or cryptocurrency details were exposed, revoke any token approvals and transfer funds to a new wallet. Report the domain to relevant platforms, including Google Safe Browsing, PhishTank, or local cybersecurity authorities, to prevent further abuse.