No. MalwareAnalyzer scanned csteam.gg on 21 Aug 2026 and returned a suspicious verdict with a score of 35 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was csteam.gg checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

csteam.gg - suspicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned csteam.gg and returned a suspicious verdict (score 35), categorised as phishing. The page resolved to 216.198.79.1 on Lefkoff Industries in US. 1 domain and 1 IP were contacted, over 25 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 35) · Confidence 38%
Scanned URL: https://csteam.gg/
Domain: csteam.gg · IP: 216.198.79.1 · AS16509 · US
Server: Vercel
Page title: CSteam — Team Strategy Management for CS2
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Sep 19 22: · subject CN=csteam.gg
HTTP requests captured: 25 · outgoing links: 6
Scan tier: standard · observed 2026-08-21 18:04:08 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates steam (typosquat)

Detected technologies

Vercel
Next.js

Contacted infrastructure

216.198.79.1 - AS16509 Lefkoff Industries (United States)

Observed indicators

csteam.gg
216.198.79.1
https://csteam.gg/
https://csteam.gg/_next/static/css/6025195da3aa3fdd.css?dpl=dpl_4GyiEr25oFoFTSAgEmLcDawm81jB
https://csteam.gg/_next/static/chunks/webpack-beb4dcd3b1ca2c84.js?dpl=dpl_4GyiEr25oFoFTSAgEmLcDawm81jB
https://csteam.gg/_next/static/chunks/4bd1b696-81fb5bb41966eb3c.js?dpl=dpl_4GyiEr25oFoFTSAgEmLcDawm81jB
https://csteam.gg/_next/static/chunks/1684-b40f4b9e2634a78a.js?dpl=dpl_4GyiEr25oFoFTSAgEmLcDawm81jB
https://csteam.gg/_next/static/chunks/main-app-d41d56f775a954bb.js?dpl=dpl_4GyiEr25oFoFTSAgEmLcDawm81jB
https://csteam.gg/_next/static/chunks/7598-eeb919dea3f68ee8.js?dpl=dpl_4GyiEr25oFoFTSAgEmLcDawm81jB
https://csteam.gg/_next/static/chunks/app/layout-ae52a3e2bf907fba.js?dpl=dpl_4GyiEr25oFoFTSAgEmLcDawm81jB
https://csteam.gg/_next/static/chunks/6874-e23776db31a025cd.js?dpl=dpl_4GyiEr25oFoFTSAgEmLcDawm81jB
https://csteam.gg/_next/static/chunks/app/page-10d169074b71cf3d.js?dpl=dpl_4GyiEr25oFoFTSAgEmLcDawm81jB
https://csteam.gg/favicon.svg
https://csteam.gg/favicon.png
https://csteam.gg/_next/static/chunks/polyfills-42372ed130431b0a.js?dpl=dpl_4GyiEr25oFoFTSAgEmLcDawm81jB
https://csteam.gg/logo.svg
https://csteam.gg/login
https://csteam.gg/register

Questions about csteam.gg

Is csteam.gg safe?: No. MalwareAnalyzer scanned csteam.gg on 21 Aug 2026 and returned a suspicious verdict with a score of 35 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was csteam.gg checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of csteam.gg

Scanned on MalwareAnalyzer by Cyble · Open interactive scan