transportessimon[.]com

This domain is flagged as a high-risk brand impersonation targeting CS2, specifically the CSGORoll platform. Registered on February 21, 2026, through Arsys Internet, S.L. dba NICLINE.COM, the domain remains active and resolves to IP 172.64.145.246 hosted by Cloudflare in the United States. The page title claims to offer CSGO skins via the world's longest established CSGO game site, a direct impersonation of the legitimate CSGORoll service. Infrastructure analysis reveals the domain runs WordPress with PHP, MySQL, Apache, Bootstrap, Slider Revolution, reCAPTCHA, and OWL Carousel, indicating a sophisticated setup likely designed to harvest credentials or trick users into fraudulent transactions. The SSL certificate is issued by Sectigo, and mail exchange records point to mx.serviciodecorreo.es. Gridinsoft assigns a trust score of 0/100, and one security blocklist, PhishDestroy, has flagged it. VirusTotal reports 1 detection out of 93 vendors. Defenders should treat this domain as actively malicious, block access at the network level, and monitor for related subdomains or infrastructure. Users who have interacted with this site should change any credentials entered and monitor financial accounts for unauthorized activity.