csmoneys[.]at
“CS.Money - Best CS2 Skins Marketplace & Trading Site”
Deteksi tersimpan
Peringatan penyamaran
- Jenis penyamaran
referer_split- Skor penyamaran
- 1/6
Ringkasan bukti
csmoneys.at is a phishing domain that targets users interested in trading CS2 skins by impersonating the legitimate CS.Money marketplace. Despite the domain being taken down, it has already been flagged by 19 out of 94 vendors on VirusTotal, indicating its malicious nature. The domain was also listed on three public blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL.
The domain was hosted on an IP address located in Russia, specifically under the organization Prospero OOO. It used an SSL certificate issued by Let's Encrypt, a common choice for cybercriminals due to its ease of access and cost-free nature. The page's title, "CS.Money - Best CS2 Skins Marketplace & Trading Site," was designed to lure unsuspecting users into believing they were visiting the legitimate CS.Money site.
The swift takedown of csmoneys.at highlights the effectiveness of collaborative efforts between cybersecurity entities and blocklist maintainers. The presence of the domain on multiple blocklists suggests that it was part of a broader phishing campaign aimed at exploiting the popularity of CS2 skins trading. The domain's detection by 19 vendors on VirusTotal further underscores the threat it posed to users before being taken offline.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | www.youtube.com/s/player/8fb635c2/player_embed_es6.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
| Cloudflare DNS | csmoneys.at |
malicious | Sinkholed |
| OpenDNS | csmoneys.at |
phishing | Phishing Block |
| DigiCert UltraDNS | csmoneys.at |
malicious | Sinkholed |
| Hagezi Threat Feed | csmoneys.at |
malicious | Sinkholed |
| DNS4EU | csmoneys.at |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
8 sumber eksternal dipantau Tidak cocok
Laporan komunitas
Dilaporkan oleh 1 anggota komunitas; pertama terlihat 18/04/2026
- Laporan tersimpan
- 1
- URL unik yang dilaporkan
- 1
Intelijen komunitas
1 laporan komunitas
KategoriPHISHING
Detection Summary The Anti-Phishing Volunteers & Associates Security Incident Response System has flagged this as a domain threat, classified as phishing attack against CS.MONEY. Threat detected at 2026-02-24T18:02:55.030Z.
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of csmoneys.at · checked Apr 19, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive