csgomy[.]com

Analysis of csgomy.com indicates the domain was created on 5 March 2026 and is currently taken offline. The site was blocked by the PhishDestroy community and appears on a single security blocklist, demonstrating that at least one reputable anti‑phishing feed has flagged it. VirusTotal scans show nine of ninety‑five antivirus or URL‑reputation engines returned a positive detection, confirming malicious classification across multiple independent vendors. The domain resolves to the IP address 188.114.97.3, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. Hosting is provided through Cloudflare’s network, as indicated by the authoritative nameservers donna.ns.cloudflare.com and rex.ns.cloudflare.com.

The TLS certificate is issued by Let’s Encrypt with the E7 identifier, a standard free certificate that does not provide any additional trust signals. The registrar listed is Global Domain Group LLC, a known domain registration service. The page title retrieved from the site reads “MYCSGO – открывай лучшие кейсы CS:GO & CS2”, referencing the popular game CS:GO and CS2, which is typical of lure content used in phishing campaigns targeting gamers. No further content has been captured, and the site is presently offline, limiting immediate observation of payload or credential‑capture mechanisms.

Uncertainty remains regarding the exact phishing template, the presence of any credential‑stealing forms, and whether the domain was part of a larger campaign. Defenders should add the domain and its IP address to internal blocklists, monitor for any resurgence of the same host or nameserver configuration, and correlate network logs for connections to 188.114.97.3. Because the domain is registered through Global Domain Group LLC, investigators may consider requesting registration records for additional context.