caaser[.]net

This domain, caaser.net, is currently flagged as an active phishing site targeting users of Counter-Strike 2 (CS2) and CS:GO gaming communities. The threat type is classified as credential and in-game asset theft, specifically impersonating platforms that offer weapon skin upgrades or modifications. The site remains operational and has not yet been widely detected by security vendors. Analysis of the domain reveals it was registered on July 06, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. As of the latest scan, it has been flagged by 0 of 95 security vendors on VirusTotal, indicating low initial detection but potential for rapid escalation. The domain resolves to IP address 172.67.211.210, which is hosted behind Cloudflare infrastructure, a common tactic to obscure origin servers and evade takedowns. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. AlienVault OTX records the domain in one threat intelligence pulse, suggesting early but limited awareness within the security community. The current risk level remains under investigation, but the domain’s active status and targeted impersonation of gaming asset platforms pose a significant threat to users. Organizations and individuals are advised to block the domain and its associated IP at the network level. Users should be alerted to avoid entering credentials or payment information on caaser.net, and any accounts accessed via this domain should be considered compromised. Monitoring for further detections on VirusTotal and OTX is recommended, as well as reporting the domain to relevant abuse contacts for registrar and hosting providers.