cheats-cs[.]live

The domain cheats-cs.live is currently flagged as an active, high‑risk brand‑impersonation campaign targeting the cs2 brand. Infrastructure analysis shows the domain resolves to IP 64.29.17.1, an address owned by AS16509 Amazon.com, Inc. and geolocated to the United States. The authoritative name servers are ns05.domaincontrol.com and ns06.domaincontrol.com, indicating registration through GoDaddy.com, LLC. TLS is provided by a Let’s Encrypt R13 certificate, and the site advertises Vercel hosting with HTTP Strict Transport Security enabled; an initial HTTP 307 redirect is observed. The page title returned by the server is "👑 MLG HACKS - For Real Gamers Only," which does not directly reference the targeted brand. VirusTotal records show a single vendor detection out of 95 scans, and the domain appears on one public blocklist. It has been blocked by PhishDestroy and receives a Gridinsoft trust score of 0 / 100. No further content analysis is available, and the exact phishing mechanics remain unverified. Defenders should add cheats-cs.live to URL filtering and DNS block lists, monitor for additional indicators such as the associated IP address and name‑server pair, and update intrusion‑detection signatures to capture the observed redirect behavior. Continuous observation is advised to detect any evolution of the payload or the emergence of new detection signatures.