# csgorooll.com — SUSPICIOUS

> Review the safety status of csgorooll.com. The site is under phishing investigation. Exercise caution and avoid sharing personal info.

## Summary
PhishDestroy identifies csgorooll.com as a domain currently under investigation for potential generic phishing activity. Although it is not yet confirmed as malicious, user caution is advised due to the suspicious nature of its associated content and domain registration patterns. The domain is relatively new, which can often correlate with higher risk for phishing or scam-related use.

Technical analysis reveals that csgorooll.com was registered recently through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 7, 2025. It resolves to the IP address 104.21.94.211. Despite thorough scanning, VirusTotal reports zero detections from 95 security vendors, indicating it has not been flagged by traditional antivirus or anti-phishing tools at this time. However, the lack of detections does not guarantee safety, especially given the domain’s recent creation and suspicious context.

Currently, the status of csgorooll.com remains active but under close observation by PhishDestroy. Users are recommended to avoid interacting with this domain, refrain from submitting any personal or financial data, and stay alert for phishing attempts. Continuous monitoring and additional investigative measures will help determine if this domain poses an actual threat or if it is a false positive. For now, exercising prudence is the best course of action.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: CSGOROLL — Open CS2, CS:GO cases with instant withdrawal of items!

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.94.211
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: nia.ns.cloudflare.com,quinton.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf38-1e3b-703c-9000-9dba11e387ca.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/b7bb4721-0fa1-4cfd-86f0-25cda3681a5b
- Wayback Machine: https://web.archive.org/web/https://csgorooll.com
- PhishDestroy: https://phishdestroy.io/domain/csgorooll.com/
- LLM endpoint: https://phishdestroy.io/domain/csgorooll.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/csgorooll.com/
Last updated: 2026-03-19