easybrop[.]com

The domain easybrop.com has been identified as a phishing site impersonating a Counter-Strike 2 (CS2) case-opening platform, specifically targeting users with the false pretense of offering in-game item rewards. Analysis indicates this domain operates under the page title 'EasyDrop - Кейсы КС2, Официальный Сайт Открытия кейсов CS2,' suggesting an attempt to deceive users into engaging with fraudulent case-opening mechanisms, likely involving credential harvesting or cryptocurrency theft. As of the latest assessment, the domain is offline, though prior activity warrants continued monitoring. Infrastructure analysis reveals that easybrop.com resolves to the IP address 172.67.137.175 and was registered on February 21, 2026, through NiceNIC International Group Co., Limited. Detection metrics indicate elevated risk, with 13 of 95 security vendors on VirusTotal flagging the domain as malicious. The domain appears on one security blocklist and holds a trust score of 0/100, reinforcing its classification as a high-risk entity. The use of a content delivery network-associated IP suggests potential obfuscation of the true hosting origin, a common tactic in phishing infrastructure. Current status confirms the domain is offline, though its prior activity and registration details indicate a deliberate attempt to exploit CS2 players. Organizations and individuals are advised to block the domain and associated IP at the network level. Users should be educated on recognizing phishing attempts, particularly those leveraging gaming-related lures. Security teams are recommended to monitor for similar domains registered via NiceNIC or resolving to the same IP range, as these may represent related threat actor infrastructure. Proactive measures, including domain reputation checks and endpoint protection updates, are critical to mitigating such threats.