admin[.]altyshka-drop[.]space

The domain admin.altyshka-drop.space was identified as a phishing infrastructure specifically targeting Counter-Strike 2 (CS2) players through brand impersonation. This domain presented itself as a platform for opening CS2 and CS:GO cases with skin withdrawals, as indicated by its page title: "Открыть кейсы КС 2(CS 2), КС ГО с выводом скинов: SNAKEBOX." The current status of the domain is offline, though it previously posed an elevated risk to users seeking in-game rewards. Analysis of the domain reveals several technical indicators of malicious activity. Only 1 of 95 security vendors on VirusTotal flagged this domain, suggesting limited initial detection. The domain was registered on February 21, 2026, through Beget LLC and resolved to the IP address 83.222.24.157. It appeared on one security blocklist and received a trust score of 0/100 from Gridinsoft. Infrastructure analysis indicates the use of Vue.js, Nginx, Alpine.js, jQuery, Yandex.Metrika, Google Analytics, and DataTables, which are commonly employed to create convincing fraudulent interfaces. The domain has since been taken offline, likely due to enforcement actions such as the block implemented by PhishDestroy. Despite its current inactive status, the infrastructure demonstrates a targeted approach to stealing CS2 skins and credentials. Users are advised to verify the legitimacy of any gaming reward sites, particularly those requiring login credentials or skin transfers. Monitoring for similar domains registered through Beget LLC or resolving to 83.222.24.157 may help identify related threats. Organizations should update blocklists to include this domain and its associated IP to prevent potential re-emergence or similar attacks.