s[.]team-xr[.]com

The domain s.team-xr.com is a confirmed phishing site engaged in brand impersonation targeting Counter-Strike users. It presented itself as a 'Steam Community' page to deceive victims into cryptocurrency-related scams, though no drainer kit was identified. As of the latest verification, s.team-xr.com has been taken offline, but it previously posed an elevated risk to users seeking Counter-Strike or Steam-related content.

Technical indicators confirm the malicious nature of s.team-xr.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including alphaMountain.ai, and appeared on one security blocklist (PhishDestroy). Registered through Web Commerce Communications Limited dba WebNic.cc on February 21, 2026, it resolved to the IP address 104.102.49.106, hosted on Akamai Technologies' infrastructure in Germany (AS16625). The SSL certificate was issued by E6, and the domain used nameservers ns100.webnic.cc and ns101.webnic.cc. Trust scores from Gridinsoft (0/100) and Scamadviser (21/100) further indicate its fraudulent intent.

Victims of s.team-xr.com should take immediate action to secure their assets and accounts. For cryptocurrency-related scams, revoke any token approvals granted to suspicious contracts and transfer funds to a new wallet. If credentials were entered, change passwords for Steam and any linked accounts, enable two-factor authentication, and monitor for unauthorized transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts.