bazesteam[.]pips[.]ru

Analysis on bazesteam.pips.ru, observed on July 23 2026, shows a high‑risk brand‑impersonation infrastructure targeting the Steam gaming platform. The domain was registered through the R01‑RU registrar and has a creation timestamp of 30 November 2000, indicating long‑standing registration. DNS resolution points to IP 212.46.196.137, which belongs to AS3216 PJSC “Vimpelcom” in Russia. The nameservers listed are ns1.freehosting.centre.ru (duplicated) and ns2.freehosting.centre.ru, typical of free‑hosting services.

An HTTP GET returns status 200, but the site lacks an SSL/TLS certificate, exposing traffic to interception. The page title returned is “Steam Community”, matching the declared brand target of Steam and supporting the classification as a gaming‑scam impersonation. Reputation services rate the domain poorly: Scamadviser assigns a trust score of 1 / 100, Gridinsoft 0 / 100, and the domain appears on one security blocklist. VirusTotal scans have flagged the domain in 15 of 93 antivirus engines, reinforcing the malicious assessment.

PhishDestroy already blocks the domain, confirming that security communities consider it abusive. Given the combination of a brand‑specific page title, high‑risk vendor detections, poor reputation scores, lack of encryption, and confirmed blocklisting, defenders should treat any traffic to bazesteam.pips.ru as malicious. Recommendations include adding the domain and its resolving IP to network deny lists, enforcing TLS‑only outbound policies, and monitoring for any credential‑submission attempts that reference Steam services. Continuous re‑evaluation is advised, as the infrastructure remains active.