CSDB · CS2 Gambling
Is This the Real Site?
A cloned gambling site is a perfect copy of the real one. The page looks right, the logo is right, the games are right — and the login form sends your Steam credentials to someone else. The address bar is usually the only thing that gives it away.
What this checks, and what it cannot
We hold canonical domains, and recorded mirrors where an operator runs them, for 46CS2 gambling operators — live and closed. A pasted address is matched against that list, and near-misses on a recorded name are flagged, because a character swapped in a familiar word is exactly what a clone is built from.
The limits are worth stating plainly, because a security tool that overstates itself is worse than none. This cannot tell you a site is safe: a verified domain confirms the address and nothing about the operator behind it. It cannot tell you an unrecognised site is a scam either — our records cover the operators we write about, not the whole internet, and most sites in the world are simply not in here. Where a domain is unrecognised, we say so and stop.
Before you sign in anywhere
- Read the whole domain, including the ending.
.comand.netare different sites owned by different people, and a hyphen or a swapped character is easy to miss in a name you have typed a hundred times. - Steam login happens on steamcommunity.com. If a gambling site shows a Steam username and password form on its own page rather than sending you to Steam, it is harvesting the password. Close the tab.
- No gambling site needs your Steam API key.A stolen key lets an attacker cancel your real trade offers and substitute their own, which is how “I sent the skins and got nothing” usually happens.
- Arrive by your own bookmark, not by an ad.Search ads on a brand's own name are bought by clones as a matter of routine.
- Support never messages you first. An unsolicited Steam or Discord message claiming to be site support is an impersonation essentially every time.
Frequently asked
Does an unrecognised domain mean the site is a scam?
No, and we will not say that it does. We hold verified domains for the operators we cover, which is a small share of the gambling sites that exist. An unrecognised result is a statement about our records, not about the site — plenty of legitimate sites are not in our database.
What does a verified result actually prove?
That the address matches the domain we recorded for that operator, and nothing else. It is not a statement that the site is licensed, solvent, fair or a good idea to deposit on. Those questions are answered — as far as they can be — on the operator’s own review page.
How do cloned CS2 gambling sites work?
An attacker copies a well-known site exactly, registers a domain a character or two away from the real one, and buys search ads on the brand’s own name. The copy exists to capture your Steam login. Because the page itself is identical, the address bar is usually the only thing that differs.
What should I check before signing in with Steam?
That the domain is exactly right, character by character, including the ending — .com and .net are different sites. Steam’s sign-in page should be on steamcommunity.com and nowhere else; if a site shows a Steam login form on its own domain, it is harvesting your password. Never enter a Steam API key on a gambling site, and never accept an unsolicited message from someone claiming to be support.
Domain records last reviewed 31 July 2026. Spotted a cloned domain we should record? Tell us— we do not publish reports as accusations, but we do check them.