cybershok[.]net

This domain, cybershok.net, is under investigation for phishing activity targeting users of CS2 (Counter-Strike 2) gaming servers. Analysis indicates the site presents itself as a legitimate gaming server platform, as evidenced by the page title 'CYBERSHOKE — сервера CS2, DM, Retake и 5x5,' which explicitly references CS2 and related game modes. The domain was registered on March 5, 2026, through NiceNIC International Group Co., Limited, and currently resolves to the IP address 194.36.191.175. While no detections were reported by 95 vendors in a recent scan, this absence does not confirm safety, as phishing infrastructure often evades initial detection. The domain is flagged on two security blocklists (PhishDestroy and BLP-Malware) and appears in 23 threat intelligence pulses on a major threat intelligence platform, suggesting prior malicious associations. Infrastructure analysis reveals the use of a Let's Encrypt SSL certificate, a common practice among both legitimate and malicious sites to encrypt traffic. The domain's trust score is rated at 0/100, further indicating potential risk. Defenders should treat this domain as active phishing infrastructure, particularly for users involved in CS2 gaming communities. Immediate actions include blocking the domain and IP at the network level, monitoring for connections to 194.36.191.175, and reviewing logs for any prior interactions. Given the domain's recent registration and gaming-related context, additional scrutiny of user reports or complaints related to CS2 server scams is recommended. The exact phishing mechanism remains unconfirmed, but the domain's association with gaming server impersonation warrants proactive mitigation.