# csmarketcs.com — SUSPICIOUS

> csmarketcs.com is linked to medium-risk phishing activity. Stay cautious and verify before sharing info. Learn more about this domain now.

## Summary
PhishDestroy identifies csmarketcs.com as an active phishing domain posing a medium risk to users. The domain is suspected of generic phishing attacks designed to deceive individuals into divulging sensitive information such as login credentials or financial details. Due to its relatively recent creation date and associated registrant details, csmarketcs.com is under scrutiny for potentially fraudulent use.

From a technical standpoint, csmarketcs.com resolves to the IP address 58.64.137.69 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal analysis reveals that 3 out of 95 security vendors have flagged this domain, indicating some consensus about its suspicious nature, though not universally detected. The domain's establishment on February 26, 2025, suggests it is newly created, which is a common trait among phishing domains attempting to evade traditional blacklists.

Currently, csmarketcs.com remains active and continues to pose a threat. PhishDestroy recommends users and organizations exercise caution when interacting with this domain. Security teams should consider blocking or monitoring traffic to and from this domain, and users should avoid submitting personal information on sites associated with csmarketcs.com. Continuous vigilance and use of updated security tools are advised to mitigate any potential compromise linked to this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: CS MARKET - Покупайте КС:ГО (CS2) предметы - КС Маркет

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 58.64.137.69
- IP Country: HK
- IP City: Tung Chung
- IP Org: AS17444 HKBN Enterprise Solutions Limited
- Nameservers: ["expired-ns1.niceisp.com", "expired-ns2.niceisp.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["alphaMountain.ai", "Fortinet", "SOCRadar", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/c82b1711-a391-4f97-a25f-a90ebb479f34.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/csmarketcs.com
- Wayback Machine: https://web.archive.org/web/https://csmarketcs.com
- PhishDestroy: https://phishdestroy.io/domain/csmarketcs.com/
- LLM endpoint: https://phishdestroy.io/domain/csmarketcs.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/csmarketcs.com/
Last updated: 2026-03-19