csmqrket[.]com

csmqrket.com masquerades as a legitimate marketplace for CS:GO items, but it is a phishing domain designed to steal user credentials. The domain's page title is in Russian, indicating a potential target audience or origin. Despite being taken down, it was flagged by 5 out of 94 vendors on VirusTotal, highlighting its malicious intent.

The domain was registered with NICENIC INTERNATIONAL GROUP CO., LIMITED and hosted on an IP address managed by Cloudflare, Inc., located in Canada. The SSL certificate was issued by Google Trust Services, which might lend an appearance of legitimacy to unsuspecting users. The domain was first created in 2026, suggesting it may have been part of a planned or future phishing campaign.

This domain was included in PhishDestroy's public blocklist, indicating its identification as a threat. The presence of the domain on only one public blocklist suggests it was either short-lived or not widely reported before being taken offline. The combination of a specific target audience and the use of a reputable SSL issuer underscores the sophistication of the phishing attempt. Such domains exploit the gap between registration and detection, allowing them to operate briefly before being flagged by security vendors.