cs-booms[.]shop

This report analyzes the domain cs-booms.shop, which was identified as a threat based on available data. The site's page title is "Gaming Portal | Esports," but it is classified as an impersonation scam specifically targeting the brand "valve." This indicates the site likely attempted to deceive users into believing it was a legitimate portal associated with Valve Corporation, a major video game developer. The primary threat posed is brand impersonation, potentially used for credential harvesting, malware distribution, or other fraudulent activities under the guise of a trusted gaming brand.

Technical evidence confirms the site's malicious nature. VirusTotal analysis shows 16 detections out of 95 security vendors, with the domain flagged by ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. The domain is registered with REGRU-RU, hosted on IP address 104.21.42.216 (United States), which belongs to AS13335 Cloudflare, Inc. The domain was created on 2025-12-30 and has no SSL certificate. Nameservers are finley.ns.cloudflare.com and sky.ns.cloudflare.com.

The domain is currently offline and down, with a GridinSoft trust rating of 0 out of 100 and a DOM risk score of 10. Its presence on one blocklist further supports its malicious classification. The risk level is high due to the impersonation of a well-known brand and the number of security vendor flags, despite the site being inactive. Users should avoid any interaction with this domain.