ggdgop[.]com

The domain ggdgop.com is a confirmed phishing site engaged in brand impersonation targeting cs2, a popular gaming title. It presents itself as a drop service for in-game items but is designed to deceive users into disclosing account credentials or making fraudulent transactions. No crypto drainer kit was detected, and the site is currently taken offline, though it remains a documented threat for historical reference.

Technical analysis shows ggdgop.com was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). The domain was registered on 2025-05-02 23:41:20 through NiceNIC International Group Co., Limited and resolves to the IP address 172.67.132.122, hosted on Cloudflare’s network (AS13335) in the US. No SSL certificate was available at the time of assessment. The observed page title was 'GGDROP — Крупные дропы только у нас!', and technologies detected include Unpkg, Cloudflare, AOS, and HTTP/3. Gridinsoft assigned a trust score of 0/100, reinforcing its malicious classification.

Users who interacted with ggdgop.com should immediately change their cs2 account passwords and enable two-factor authentication to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized trades or logins, and report any fraudulent transactions to the platform’s support team. The domain can be reported to Google Safe Browsing, PhishTank, or the registrar (NiceNIC) for further action. If financial or personal data was exposed, consider contacting relevant institutions to secure accounts and review transaction histories.