csmarketplace[.]net

The domain csmarketplace.net was registered on December 7, 2024 through Hosting Concepts B.V. d/b/a Registrar.eu. Its authoritative name servers are ns1.safe-networks.net and ns2.safe-networks.net, and DNS resolution points to the IP address 185.208.156.112, which belongs to AS42624 Global-Data System IT Corporation and is geo‑located in Switzerland. No TLS certificate is presented, indicating that the site is served only over HTTP. The site title returned by the HTTP response reads “CS Marketplace - CS:GO Trade Market for sell, buy and exchange skins”, suggesting the page is intended to lure users interested in Counter‑Strike: Global Offensive skin trading. Seven of ninety‑five antivirus and URL‑reputation engines on VirusTotal flagged the domain, and it is listed on at least one public blocklist.

PhishDestroy has explicitly blocked the domain. Independent reputation services assign extremely low scores: Gridinsoft rates the domain 0 out of 100 and Scamadviser 1 out of 100, reflecting a high confidence of malicious intent. Current measurements show the host is offline, which removes the immediate threat of active content delivery but does not eliminate the risk of future re‑activation or reuse of the same infrastructure. The combination of a recent registration date, lack of encryption, low reputation scores, and detection by multiple vendors aligns with typical characteristics of generic phishing sites that impersonate legitimate gaming marketplaces. Defenders should add csmarketplace.net to URL filtering policies and ensure that the associated IP address 185.208.156.112 is blocked at network perimeter devices.

Continuous monitoring of the name servers and the AS for any new host records is recommended, as attackers often repoint the domain to fresh servers.