cs2yooma[.]com

PhishDestroy has identified cs2yooma.com as a generic phishing threat with an elevated risk level, currently taken offline. This domain was designed to deceive users by masquerading as the official Yooma website for Counter-Strike 2 servers, a common tactic to harvest credentials or deliver malware under the guise of popular gaming communities. The site's title explicitly references CS2 server types like AWP, PUBLIC, and RETAKE, which are typical lures for gamers seeking competitive play.

Technical analysis reveals several red flags. The domain was created on February 21, 2026, a very recent registration typical of malicious sites. It was registered through NiceNIC International Group Co., Limited, a registrar often associated with questionable domains. The IP address 104.21.44.118 is hosted by Cloudflare, which can obscure the true origin. VirusTotal data shows that 2 out of 95 security vendors flagged the domain as malicious, indicating broad detection. Additionally, the domain appears on one security blocklist and its SSL certificate is issued by Google Trust Services (WE1), which is legitimate but does not guarantee safety. The combination of a new domain, suspicious registrar, and low trust score makes this a clear threat.

Users who may have encountered this site should take immediate action. Since the threat is generic phishing, the primary risk is credential theft or malware installation. If any credentials were entered, change passwords immediately and enable two-factor authentication on all accounts. Run a full antivirus scan on any device that accessed the site. Avoid clicking links or downloading files from similar domains. Always verify official websites by checking known URLs and using PhishDestroy's verification tools before interacting with gaming or financial sites. Stay vigilant against phishing attempts that exploit popular brands.