mycsggo[.]com

This domain, mycsggo.com, is flagged as an active phishing site impersonating a Counter-Strike 2 (CS2) case-opening platform, as indicated by its page title: 'MYCSGO — Официальный Сайт :: Открытие Кейсов КС2 - с 2012 года | Ассортимент Скинов уже ждет вашего Опенкейса!' The domain was registered on April 13, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and remains active as of July 12, 2026. Infrastructure analysis reveals it resolves to IP address 172.67.153.183, hosted on Cloudflare's network (AS13335) in the United States. The domain uses Cloudflare nameservers (dell.ns.cloudflare.com and valentin.ns.cloudflare.com) and is protected by a Let's Encrypt SSL certificate (serial E7). The site employs multiple technologies, including Unpkg, Cloudflare Browser Insights, AOS, and HTTP/3, which are consistent with modern web applications but do not inherently indicate malicious intent. However, the domain appears on one security blocklist and was identified in a single threat intelligence pulse on AlienVault OTX. Gridinsoft assigns it a trust score of 0/100, reinforcing its high-risk classification. While one security vendor on VirusTotal flags the domain, the limited detection count does not provide conclusive evidence of widespread recognition as malicious. Defenders should prioritize monitoring or blocking this domain based on its association with phishing activity targeting users of CS2 skin-trading platforms. The use of Cloudflare infrastructure may complicate takedown efforts, but the domain's registration details and hosting provider could be leveraged for further investigation. No evidence of a specific phishing kit or additional malicious infrastructure (e.g., redirect chains, C2 domains) is currently available, so continued monitoring of related indicators is recommended.