Hello Everybody,

I’ve just seen the weirdest phishing scam site.

So basically I searched up on google a site called: dmarket, it’s a site for trading and selling csgo skins. The first thing that popped up was an ad that had the same url as the real site: “dmarket.com“,

but here is the weird thing, when I clicked on it, it took me to a fake site with the domain: damkret.com.

How exactly does it work?

also when I pasted the URL on google for some testing and trying to take down this phishing site so no one will get their account stolen, I noticed something, the site doesn’t accept normal requests, only ones that were redirected from the ad.

Can someone explain this?