csmarbet[.]com

The domain csmarbet.com has been identified as a brand impersonation phishing threat, specifically targeting users interested in purchasing items related to the game CS:GO, also known as CS2. The domain is currently offline. It was designed to mimic a legitimate marketplace dealing in game items, deceiving unsuspecting users into providing sensitive information or engaging in fraudulent transactions.

Technical analysis shows that csmarbet.com was flagged by 4 out of 95 security vendors on VirusTotal, indicating a significant risk of phishing activities. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolved to the IP address 104.21.94.224. The domain was created on March 27, 2026, and has appeared on one known security blocklist. This intelligence suggests that the domain was specifically set up with malicious intent and was active until recently taken offline. Notably, the domain's title in Russian, "Покупайте КС:ГО (CS2) предметы - КС Маркет", further confirms its target demographic and the brand it aimed to impersonate.

Given the current status of csmarbet.com as offline, the immediate threat has been mitigated. However, users who may have interacted with this domain are advised to review their security settings, change passwords, and monitor financial accounts for any signs of unauthorized activity. Security teams should also update blocklists to prevent future access, despite its current offline status. Continuous monitoring for any related domains emerging with similar intent is recommended to safeguard against potential resurgence of such threats.