csgoonroll[.]com

This domain is flagged for elevated risk due to its association with credential theft operations targeting online gaming platforms. Analysis indicates csgoonroll.com is designed to harvest login credentials, likely impersonating legitimate gaming services or in-game item trading platforms to deceive users into entering sensitive account information. The infrastructure and naming convention suggest a focus on the Counter-Strike gaming community, a frequent target for account takeovers and fraudulent transactions. Infrastructure analysis reveals multiple high-risk indicators. The domain resolves to IP address 188.114.96.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 27, 2026, an unusually future creation date that may indicate typosquatting or preemptive registration for malicious campaigns. VirusTotal reports 11 out of 95 security vendors flag the domain as malicious, while it appears on at least one security blocklist and is referenced in one AlienVault OTX threat intelligence pulse. The domain holds a Gridinsoft trust score of 0/100, reinforcing its classification as high-risk infrastructure. Current status shows the domain has been taken offline, though historical DNS records and cached content may still pose residual threats. To mitigate risks associated with credential theft schemes, users should immediately revoke access to any accounts potentially exposed through this domain and enable multi-factor authentication on all gaming and financial platforms. Network administrators are advised to block the IP address 188.114.96.3 at the firewall level and monitor for connections to this infrastructure. Organizations should review logs for any historical interactions with csgoonroll.com, particularly focusing on authentication attempts or data submissions from March 2026 onward. Security teams are recommended to correlate this domain with other indicators of compromise, including the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, which has been linked to previous phishing campaigns targeting digital asset holders.