masterseries[.]pro

Analysis of masterseries.pro indicates a brand impersonation campaign targeting Counter-Strike users, operational as of July 23, 2026. The domain was flagged by 15 of 95 security vendors on VirusTotal, though the exact detection timeline is not specified. It appears on a single security blocklist (PhishDestroy) and is referenced in 15 AlienVault OTX threat intelligence pulses, suggesting prior malicious activity. The page title 'TOURNAMENT - Masters Series' aligns with the reported scam type of brand impersonation, though no additional content analysis is available to confirm specific lures or payloads. Infrastructure analysis reveals the domain resolves to 188.114.97.3, hosted on Cloudflare's network (AS13335) in the US.

The domain was registered through Cloudflare, Inc., and uses Cloudflare nameservers (anuj.ns.cloudflare.com, colette.ns.cloudflare.com). No SSL certificate is present, which may reduce user trust but does not inherently confirm malicious intent. The domain is currently offline, though defenders should treat it as a potential threat until further validation. Defenders should prioritize blocking the domain and its resolving IP at network and endpoint layers.

Given the Cloudflare hosting, additional scrutiny of other domains resolving to the same IP or nameservers may identify related campaigns. While the domain is offline, historical logs should be reviewed for connections to 188.114.97.3 or requests to masterseries.pro. If Counter-Strike-related assets are in use, user education on tournament-themed phishing lures is recommended, though no evidence confirms active distribution of this domain. No further technical indicators (e.g., malware hashes, redirect chains) are available for deeper analysis.