goodnessbd[.]online

The domain goodnessbd.online was identified as a brand impersonation threat targeting the Blast brand, with a specific focus on luring users through a fraudulent CS.MONEY trading bot page for CS:GO/CS2 skin trades. This domain is now offline, but during its active period it posed an elevated risk to users seeking legitimate skin trading services. The site attempted to deceive visitors by mimicking the appearance and functionality of the real CS.MONEY platform, a well-known service for trading in-game skins, while covertly aiming to harvest credentials or cryptocurrency assets.

According to intelligence gathered by PhishDestroy, goodnessbd.online was flagged by 6 out of 95 security vendors on VirusTotal, indicating moderate but notable detection across the cybersecurity community. The domain was created on February 21, 2026, and resolved to IP address 104.20.19.108. It appeared on one security blocklist and held an SSL certificate issued by E1. The page title explicitly displayed "CS.MONEY — Trading Bot for fast CS:GO/CS2 skins trade," which directly contributed to the impersonation of the Blast brand. Despite these indicators, the domain's trust scores were low, and its registration details suggested a relatively recent setup typical of phishing infrastructure.

Currently, goodnessbd.online has been taken offline, neutralizing the immediate threat. However, users who may have interacted with the site should remain vigilant. PhishDestroy recommends that anyone who visited this domain or entered personal information, login credentials, or cryptocurrency wallet details immediately change their passwords and enable two-factor authentication on affected accounts. To avoid similar scams, users should always verify the legitimacy of trading platforms by checking official URLs and consulting trusted sources like PhishDestroy before engaging with any site offering high-value digital asset trades.