cs[.]2cyberscup[.]com

The domain cs.2cyberscup.com was registered through the REGRU-RU registrar and created on September 11, 2025. It resolves to the IP address 188.114.96.3, which is owned by Cloudflare, Inc. (AS13335) and is geolocated to the United States. The site presents a page title of "CS.2CYBERSCUP" and is classified as a brand impersonation campaign targeting the Dota 2 game franchise. No TLS certificate is observed, leaving the connection unencrypted.

The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service. Reputation services assign extremely low scores, with Scamadviser reporting a trust score of 1/100 and Gridinsoft reporting 0/100, indicating a high likelihood of malicious intent. Analysis on VirusTotal shows that 12 out of 95 security vendors have flagged the domain as malicious, reinforcing the suspicion of abuse. The authoritative name servers are armfazh.ns.cloudflare.com and audrey.ns.cloudflare.com, both belonging to Cloudflare’s DNS infrastructure, which is commonly used by both legitimate and malicious actors.

Current status indicates the domain has been taken offline, but historical data suggests it was used for brand impersonation. Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for the associated Cloudflare name servers, and consider adding the IP address 188.114.96.3 to deny lists. Given the lack of SSL, low trust scores, and vendor detections, any residual traffic should be treated as high risk. Further investigation is warranted to determine if related subdomains or infrastructure are being leveraged for additional campaigns, and threat‑intel feeds should be updated to reflect the confirmed brand‑impersonation activity.