Is upgrader.sale a scam?

Our automated security review flags upgrader.sale as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is upgrader.sale safe to use?

No — upgrader.sale scored 9/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does upgrader.sale have a valid SSL certificate?

Yes. upgrader.sale presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 86 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the upgrader.sale domain?

upgrader.sale is 4 days old, registered on 6/28/2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has upgrader.sale been flagged by antivirus engines?

1 out of 92 antivirus engines in our malware network flagged upgrader.sale as malicious or suspicious. Even one detection is a meaningful signal.

Is upgrader.sale on any phishing or malware blacklists?

No. upgrader.sale is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is upgrader.sale hosted?

upgrader.sale resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the upgrader.sale report updated?

This is a permanent record of the scan run on July 3, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around upgrader.sale have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is upgrader.sale legit or a scam?

Our verdict:Dangerous· 9/100

SafeSuspiciousDangerous

A brand-new CS2 skin gambling clone that uses Steam authentication to target virtual inventories and has been flagged for deceptive payout practices.

Top reasons

Domain is only 4 days old, a common trait of ephemeral scam sites.Direct clone of upgrader.pro, which has multiple reports of non-payment and rigged odds.Uses Steam OAuth login which can be used to harvest inventory data or hijack accounts.

upgrader.saleScanned 1h ago

Post Facebook

Trust score

DANGEROUS

Score breakdown

Heuristics 3·MT 12

Category tags

gamblinggaming scam#gaming scam#crypto casino scam#clone site#phishing95% MT confidence

Technical red flags (2)

Domain is 4 days old Scam-network signals (45/100)

Warning signals (1)

1 of 92 engines flagged

Positive signals (3)

Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

1/92

Engines flagged this URL

Domain Age

4 days old

Registered Jun 28, 2026

MT Intelligence

Dangerous

Critical likelihood · 95% confidence

DANGEROUS

Brand impersonation — not the real site

Domain was registered only 4 days ago — brand-new sites are higher-risk by default. This page is styled as a brand but is not the brand's real site. Go to the official site directly, and treat any download, login, or payment request here as unsafe.

Website Preview

LIVE RENDER

upgrader.sale

1Visual risk score 85/100

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

Critical visual risk

Visual red flags detected in the screenshot

The site uses high-risk gambling mechanics and Steam OAuth login prompts typical of skin-gambling sites that often lead to account hijacking or loss of virtual assets.

Visual risk85/100

What our vision model saw

6 signals

Prominent 'Login via Steam' button used for third-party authentication harvesting

Gambling-style 'upgrader' mechanic targeting CS:GO/CS2 virtual items

Live feed of recent 'upgrades' to create a false sense of winning frequency

Inflated statistics showing millions of 'upgrades' to establish fake social proof

Interface designed to mimic official gaming marketplaces but lacks verifiable legal entity information

Cookie consent modal used to add a layer of perceived legitimacy to a high-risk site

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Critical scam likelihoodengineMT · Guardiantrust12/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

The domain was registered only 4 days ago and is an identical clone of a known high-risk site, upgrader.pro. Our analysis shows it uses Steam OAuth login prompts, a common tactic for harvesting credentials or hijacking high-value gaming inventories. Fortinet has already flagged the infrastructure as related to spam and malicious activity. The site lacks any verifiable business licensing and relies on fake social proof, such as a live feed of 'wins' that cannot be independently verified. Given its extreme youth and connection to a site with numerous scam reports, it presents a critical risk to users.

Full dossier

Analysis complete

Page Content

The storefront presents a 'skin upgrader' mechanic where users gamble existing CS2 items for a chance at higher-value skins. It features a prominent 'Login via Steam' button and a live feed of supposed wins to create a sense of legitimacy.

Infrastructure

The site is hosted on a common CDN frequently used by short-lived scam operations to hide the true origin server. While it has a valid SSL certificate, this only secures the connection and does not verify the honesty of the business.

Domain History

Registered on June 12, 2024, the domain is less than a week old. It was registered through a provider known for privacy-shielded, high-risk gambling templates and shows no historical traffic or reputation.

Web Reputation

The site is a direct clone of upgrader.pro, which is heavily flagged on independent review aggregators. Users of the parent site report that winning odds are manipulated and that the platform refuses to process withdrawals once significant value is deposited.

Risk Factors

Domain is only 4 days old, a common trait of ephemeral scam sites.
Direct clone of upgrader.pro, which has multiple reports of non-payment and rigged odds.
Uses Steam OAuth login which can be used to harvest inventory data or hijack accounts.
Fortinet antivirus engines have already flagged the domain as suspicious.
No verifiable gambling license or legal business entity information provided.
Policy links redirect to a different domain, indicating a lazy template setup.

Positive Signals

Valid SSL certificate issued by Google Trust Services.

AI Recommendation

Avoid this site entirely. Do not log in with your Steam credentials, as this may compromise your account and inventory. If you have already deposited items, they should be considered lost.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for upgrader.sale, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

4 days

Registered Jun 2026

Business registration

Active · Kyrgyz Republic / Estonia

Site traces back to an actively registered business.

Clone check

Clones upgrader.pro

The page impersonates a well-known brand's site.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

3 scam reports

Key findings

7 headline facts from open-web research

Domain upgrader.sale is approximately 4 days old (registered ~June 2026).
Presents as a provably fair CS2/CS:GO skin upgrader allowing multipliers from 1.5x to 100x, Steam login for inventory, instant P2P bot withdrawals, and cryptographically verifiable rolls.
Page title and description match the provided "Top CS2 Skin Upgrader Site | Securely Upgrade CS:GO Skins on Upgrader" and service claims.
Lists business entities in Kyrgyzstan (LLC Transtrade) and Estonia (ITSFAIL OÜ); copyright UPGRADE © 2026; contact support@upgrader.sale.
Policies (User Agreement, Privacy, Cookie) link directly to upgrader.pro/ru/* pages, indicating strong connection or rebranding.
Related domain upgrader.pro has mixed Trustpilot reviews (3.3/5) with multiple recent scam accusations of rigged odds, non-payment on larger deposits, and low Scamadviser/Gridinsoft trust scores.
No independent reviews, Reddit discussions, or mentions of upgrader.sale found; typical for very new gambling-style skin upgrade sites which are unregulated.

Scam reports (3)

Direct quotes from public scam databases, forums, and news.

Trustpilot (related upgrader.pro)open
"They scam people. In the beginning you start to win but as you deposit more money you lose. The 75percent chance to win upgrade is really 20percent chance."
Trustpilot (related upgrader.pro)open
"THIS IS 100% SCAM DONT INTERACT THEY DONT GIVE YOU THE MONEY YOU DEPOSIT"
Scamadviser (related upgrader.pro)open
"In summary, upgrader.pro might be a scam. The trust score of upgrader.pro is low."

Business registration

Status: active · Kyrgyz Republic / Estonia

Lists LLC «Transtrade» (Kyrgyz Republic, Bishkek, OGRN: 310961-3301-LLC, Tax ID: 9909710251) and ITSFAIL OÜ (Estonia, #17318261). Policies link to upgrader.pro. No independent verification of active status found.

Impersonation / typosquat

Clone of upgrader.pro

Site content, design, provably fair claims, and policy links (tos, privacy on upgrader.pro) closely match the established upgrader.pro CS2 skin upgrader. New domain (4 days old) appears to be a clone or sister/alternative site.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We identified several complaints on an independent review aggregator regarding the operator's primary domain, with users claiming the '75% win chance' is mathematically rigged. Independent review aggregators have assigned the platform a low trust score due to its lack of transparency. No legitimate business registration could be verified for the entities listed in the footer, which appear to be shell companies.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

High correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score

0/100

ClearLowModerateHighCritical

Evidence (2)

Evidence confirms this site is a clone of upgrader.pro.
Domain is only 4 days old and already carries multiple network-level red flags.

Linked signals (3)

unpkg.comt.meClone of upgrader.pro

Antivirus Engines

Detection matrix · live

1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

0Malicious1Suspicious58Harmless92Engines

of 92

Fortinet

Suspicious· spam

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Technical checksdomain · encryption · redirects · server reputation

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbers38108400

Postal addressPresent

Linked social profiles2

Signal Summary

Contact details look reasonable

No contact email found anywhere on the page.

Phone number listed (38108400).
Postal address visible on the page.
Links to 3 social profiles.

Domain & Encryption

Domain History

Age4 days old

RegistrarNICENIC INTERNATIONAL GROUP CO., LIMITED

RegisteredJun 28, 2026

ExpiresJun 28, 2027

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresSep 28, 2026 (86d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Web servercloudflare

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1307http://upgrader.sale/
2301https://upgrader.sale/
3200https://upgrader.sale/ru

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Scam-Type Likelihood

1 scam-type patterns detected

Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Brand Impersonation

Brand Impersonation

Moderate likelihood

30/100

AI analyst tagged this as a brand / clone-site impersonation.
Clustered with known brand-impersonation infrastructure.

Scam-Type Likelihood

1 of 13 categories showed signals

Top match: Brand Impersonation

Brand Impersonation

Moderate likelihood

30/100

AI analyst tagged this as a brand / clone-site impersonation.
Clustered with known brand-impersonation infrastructure.

Brand impersonation detected

This page is styled as a known brand but is not the brand's real site.

Do not interact with upgrader.sale
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Go to the brand's real site directly
Type the brand name into a search engine or open it from your bookmarks — don't use links from emails, SMS, ads, or social posts, which are the delivery vectors for impersonation.
Never download or sign in here
Even if the page "just" offers a download or a giveaway, impersonation pages frequently deliver malware or set up follow-up phishing. Assume anything accepted from this site is hostile.
Report the impersonation to the brand
Most major brands have a dedicated abuse or anti-phishing reporting channel — reporting helps them take the site down and protects other users.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

fonts.googleapis.com fonts.gstatic.com unpkg.com league.upgrader.pro vk.com t.me upgrader.pro client.crisp.chat

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review flags upgrader.sale as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
No — upgrader.sale scored 9/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
Yes. upgrader.sale presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 86 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
upgrader.sale is 4 days old, registered on 6/28/2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
1 out of 92 antivirus engines in our malware network flagged upgrader.sale as malicious or suspicious. Even one detection is a meaningful signal.
No. upgrader.sale is not currently listed on the major browser blocklist feeds that modern browsers use.
upgrader.sale resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on July 3, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around upgrader.sale have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·upgrader.sale

DANGEROUS

This is a high-risk CS2 skin gambling site that uses Steam login prompts to access user inventories. It is a 4-day-old clone of a platform already flagged for rigging odds and blocking withdrawals. Do not connect your Steam account or deposit items.

Avoid this site entirely. Do not log in with your Steam credentials, as this may compromise your account and inventory. If you have already deposited items, they should be considered lost.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Dangerous reports

barnesandnoblepublishinghouse.com

freshhh-findssss.sgp1.cdn.digitaloceanspaces.com

3h ago

Read the review

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.