# hellcsce.com — SUSPICIOUS

> hellcsce.com was identified as a low-risk phishing site mimicking gaming case openings. Stay vigilant and avoid interacting with this offline domain.

## Summary
PhishDestroy identifies hellcsce.com as a low-risk phishing domain primarily targeting users interested in gaming skins. The site was designed to deceive visitors with promises of exclusive CS2 skins, aiming to harvest sensitive information under the guise of legitimate case openings. Although the threat level is classified as low, caution is advised due to its phishing nature.

Analysis shows that hellcsce.com was flagged by a minority of security vendors and appears on one security blocklist. The domain was registered recently, in March 2026, using the NiceNIC International Group Co., Limited registrar and resolved to IP 104.21.1.184. Despite minimal detection across scanning platforms, the domain’s association with phishing tactics and its gaming-themed lure warrant user awareness.

Currently, hellcsce.com is offline, reducing immediate risk to users. However, users should remain cautious of similar domains and avoid providing personal information to suspicious gaming-related websites. Continuous monitoring and proactive blocking of such domains are recommended to prevent potential future threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: HellCase — Open CS2 Cases for Exclusive Skins!

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.1.184
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: amit.ns.cloudflare.com,jewel.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf34-6ff4-766a-ad5c-8e44ad91f577.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/3b7197b8-55a7-4bfc-ac57-59547856c3b8
- Wayback Machine: https://web.archive.org/web/https://hellcsce.com
- PhishDestroy: https://phishdestroy.io/domain/hellcsce.com/
- LLM endpoint: https://phishdestroy.io/domain/hellcsce.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hellcsce.com/
Last updated: 2026-03-19