swap-dy0[.]pages[.]dev

The domain swap-dy0.pages.dev is identified as a high-risk brand impersonation threat targeting the cs2 brand. This domain is currently active and has been associated with phishing activities designed to deceive users and steal sensitive information.

Exact technical indicators reveal that swap-dy0.pages.dev has been flagged by 1 out of 95 security vendors on VirusTotal, indicating a potential threat. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.135. It was created on February 21, 2026, and currently appears on 1 security blocklist. The SSL certificate is issued by Google Trust Services / WE1, which may give a false sense of security to unsuspecting users.

The domain remains active, posing a significant risk to users who may be tricked into believing it is an official cs2 site. Immediate response actions include blocking the domain at the network level and educating users about the signs of brand impersonation. Despite the domain's presence on a security blocklist, the low VirusTotal score suggests that it may not be widely recognized, leaving many users vulnerable to its threat.