csgorungame[.]gg

PhishDestroy identifies csgorungame.gg as an active domain engaged in generic phishing activity, with strong indicators of a crypto drainer operation targeting unsuspecting users. The site mimics legitimate gaming platforms, specifically leveraging the Counter-Strike: Global Offensive (CS:GO) gaming community to lure victims into connecting cryptocurrency wallets under false pretenses. While the exact drainer kit remains under forensic analysis, the domain’s behavior aligns with known patterns where users are prompted to authenticate wallet connections or enter seed phrases, resulting in unauthorized asset transfers. This domain resolves to IP address 91.215.40.46 and was registered through NameCheap, Inc. on March 03, 2026—an unusually recent creation date suggesting opportunistic domain squatting. The SSL certificate is issued by Let’s Encrypt, a common tactic to appear legitimate, while VirusTotal currently reports 1/95 detection engines flagging the domain as malicious. Public blocklist data remains pending, and Google Safe Browsing (GSB) has not yet flagged the domain. These technical indicators suggest a newly deployed threat without widespread recognition across security platforms. The domain is currently marked as active and under investigation by PhishDestroy’s threat intelligence team. Immediate response actions include continuous monitoring for wallet drainer signatures, domain sinkholing where feasible, and outreach to hosting providers and registrars for takedown coordination. Despite these efforts, the risk remains active due to the domain’s low detection footprint and recent deployment. Users are strongly advised to avoid interacting with csgorungame.gg and to verify any suspicious gaming or crypto-related domains using PhishDestroy’s real-time threat lookup tool before engaging.