macsgo[.]com

PhishDestroy has identified macsgo.com as a generic phishing domain specifically targeting Counter-Strike: Global Offensive players. The site masquerades as a legitimate case opening platform under the brand 'MYCSGO', luring users with promises of rare in-game items. The domain was created on March 27, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with malicious domains. It resolves to IP 188.114.96.3, which is hosted behind Cloudflare (AS13335). The page title 'MYCSGO - открывай лучшие кейсы CS:GO' (Russian for 'open the best CS:GO cases') further confirms the social engineering targeting Russian-speaking gamers.

Technical indicators paint a clear picture of malicious intent. VirusTotal flags the domain with a score of 12/95, meaning 12 out of 95 security vendors classify it as malicious or phishing. Its SSL certificate is issued by Google Trust Services (WE1), which is common for sites using Cloudflare. Despite being created only recently, the domain already appears on 1 security blocklist. Notably, Google Safe Browsing (GSB) did not flag it at the time of analysis, which may give users a false sense of security. The combination of a brand-new domain, a known phishing registrar, and a high VT detection rate strongly indicates this is an active threat.

As of the latest check, macsgo.com is offline, suggesting it may have been taken down by the hosting provider or registrar following abuse reports. However, the domain could reappear under a different IP or registrar. PhishDestroy assesses the remaining risk as moderate, as the same threat actors may deploy similar domains. Users who visited the site should monitor their accounts for unauthorized access and change any passwords entered on the site. This case underscores the importance of verifying the legitimacy of gaming-related websites before interacting with them, especially those offering free or discounted in-game items.