csgorooll[.]com

This domain, csgorooll.com, is identified as a fraudulent CS:GO gambling platform designed to deceive users into participating in fake in-game case openings with promises of instant item withdrawals. Analysis indicates the site operates as a brand impersonation scam, mimicking legitimate Counter-Strike gambling services to exploit users financially. The domain is currently offline, though prior activity suggests it targeted players seeking virtual item rewards. Infrastructure analysis reveals the domain was registered through NiceNIC International Group Co., Limited and resolves to the IP address 104.21.94.211. It was created on March 05, 2026, an anomalous future date likely intended to evade detection or mislead investigators. Security vendors flagged the domain in 3 of 95 VirusTotal scans, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and employed technologies including Unpkg, Cloudflare Browser Insights, and HTTP/3, which may have been used to obscure malicious activity or enhance performance for fraudulent transactions. Given the domain’s current offline status, it may represent a dormant or abandoned operation, though similar threats often resurface under new domains. Users are advised to avoid interacting with any platform offering CS:GO or CS2 case openings without verified legitimacy. Security teams should monitor for related domains registered through NiceNIC or resolving to Cloudflare IPs, particularly those with future-dated creation timestamps. Blocking the IP 104.21.94.211 and implementing detection rules for the page title pattern may mitigate residual risk from this campaign.